SeaCMS mysqli.class.php sql injection

SeaCMS admin_members.php sql injection

SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component admin_comment_news.php

SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component admin_topic.php

SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component admin_manager.php

SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component phomebak.php

SeaCMS v13.3 has a SQL injection vulnerability in the component admin_tempvideo.php

Seacms <=13.3 is vulnerable to SQL Injection in admin_type_news.php

Seacms <13.3 is vulnerable to SQL Injection in admin_pay.php

Seacms <=13.3 is vulnerable to SQL Injection in admin_zyk.php

Seacms <=13.3 is vulnerable to SQL Injection in admin_reslib.php

Seacms <=13.3 is vulnerable to SQL Injection in admin_paylog.php

SQL Injection vulnerability in SeaCMS v.13.2 and before allows a remote attacker to execute arbitrary code via the DoTranExecSql parameter in the phome.php component

Seacms <=13.3 is vulnerable to SQL Injection in admin_members.php

SeaCMS <=13.0 is vulnerable to command execution in phome.php via the function Ebak_RepPathFiletext()

SeaCMS 13.2 has a remote code execution vulnerability located in the file sql.class.chp

SeaCMS v13.1 was discovered to a Server-Side Request Forgery (SSRF) via the url parameter at /admin_reslib.php

SeaCMS v12.9 was discovered to contain a SQL injection vulnerability via the id parameter at /dmplayer/dmku/index.php?ac=del

SeaCMS v12.9 has a SQL injection vulnerability in the key parameter of /js/player/dmplayer/dmku/index.php?ac=so

An issue was discovered in SeaCMS <=12.9 which allows remote attackers to execute arbitrary code via admin_ping.php

A vulnerability was found in SeaCMS 12.9

SQL injection vulnerability in SeaCMS version 12.9, allows remote unauthenticated attackers to execute arbitrary code and obtain sensitive information via the id parameter in…

An issue in SeaCMS v.12.9 allows an attacker to execute arbitrary commands via the admin_safe.php component

SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_weixin.php

SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_smtp.php

SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_ping.php

SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_notify.php

SeaCMS v12.8 has an arbitrary code writing vulnerability in the /jxz7g2/admin_ping.php file

SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_ip.php

A vulnerability was found in SeaCMS 11.6 and classified as problematic

An issue was discovered in /Upload/admin/admin_notify.php in Seacms 11.4 allows attackers to execute arbitrary php code via the notify1 parameter when the action parameter equals…

SeaCms before v12.6 was discovered to contain a SQL injection vulnerability via the component /js/player/dmplayer/dmku/index.php

Seacms v11.6 was discovered to contain a remote code execution (RCE) vulnerability via the component /admin/weixin.php

seacms V11.5 is affected by an arbitrary code execution vulnerability in admin_config.php

SQL Injection in SEACMS v210530 (2021-05-30) allows remote attackers to execute arbitrary code via the component "admin_ajax.php?action=checkrepeat&v_name="

SQL injection vulnerability in SeaCMS 10.1 (2020.02.08) via the id parameter in an edit action to admin_members_group.php

SeaCMS 6.64 allows SQL Injection via the upload/admin/admin_video.php order parameter

An issue was discovered in SeaCMS through 6.61

SeaCMS V13.1 is vulnerable to Incorrect Access Control

SeaCMS V13.1 is vulnerable to Incorrect Access Control

SeaCMS 12.9 has a file deletion vulnerability via admin_template.php

An issue was discovered in SeaCMS 6.61

Seacms <=13.3 is vulnerable to SQL Injection in admin_collect.php that allows an authenticated attacker to exploit the database

SeaCms 13.1 is vulnerable to code injection in the notification module of the member message notification module in the backend user module, due to unsafe handling of the "notify"…

SeaCMS 13.0 has a remote code execution vulnerability

There is a remote code execution vulnerability in SeaCMS 12.9

SeaCMS 12.9 has a remote code execution vulnerability

SeaCMS 12.9 has a remote code execution vulnerability

SeaCMS 12.9 has a remote code execution vulnerability

SeaCMS 12.9 has a remote code execution vulnerability