Login Request a demo
SE
Product
Seacms
by Seacms · last CVE Oct 22, 2026
123
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities123In the news0Timeline
Severity mix
Critical 42High 36Medium 44Low 1
Severity
All severities123Critical42High36Medium44Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Seacms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-30565
8.8
2%
Apr 4
An issue was discovered in SeaCMS version 12.9, allows remote attackers to execute arbitrary code via admin notify.php
Affected: 12.9
CVE-2023-46987
8.8
1%
Dec 28
SeaCMS v12.9 was discovered to contain a remote code execution (RCE) vulnerability via the component /augap/adminip.php
Affected: 12.9
CVE-2023-44846
8.8
1%
Oct 10
An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin_ notify.php component
Affected: through 12.8
CVE-2023-43278
8.8
0%
Sep 25
A Cross-Site Request Forgery (CSRF) in admin_manager.php of Seacms up to v12.8 allows attackers to arbitrarily add an admin account
Affected: through 12.8
CVE-2019-8418
8.8
1%
Feb 17
SeaCMS 7.2 mishandles member.php?mod=repsw4 requests
Affected: 7.2
CVE-2018-14910
8.8
1%
Aug 3
SeaCMS v6.61 allows Remote Code execution by placing PHP code in an allowed IP address (aka ip) to /admin/admin_ip.php (aka /adm1n/admin_ip.php)
Affected: 6.61
CVE-2018-14421
8.8
1%
Jul 20
SeaCMS v6.61 allows Remote Code execution by placing PHP code in a movie picture address (aka v_pic) to /admin/admin_video.php (aka /backend/admin_video.php)
Affected: 6.61
CVE-2018-13445
8.8
1%
Jul 8
An issue was discovered in SeaCMS 6.61
Affected: 6.61
CVE-2018-13444
8.8
1%
Jul 8
An issue was discovered in SeaCMS 6.61
Affected: 6.61
CVE-2019-25778
New
8.2
0%
Oct 22
SeaCMS 8.7 SQL Injection via comment/api/index.php rlist Parameter
Affected: through 8.7
CVE-2023-44848
8.1
1%
Oct 10
An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin_template.php component
Affected: through 12.8
CVE-2024-44720
7.5
1%
Sep 9
SeaCMS v13.1 was discovered to an arbitrary file read vulnerability via the component admin_safe.php
Affected: 13.1
CVE-2024-39027
7.5
0%
Jul 5
SeaCMS v12.9 has an unauthorized SQL injection vulnerability
Affected: 12.9
CVE-2018-17365
7.5
2%
Sep 26
SeaCMS 6.64 and 7.2 allows remote attackers to delete arbitrary files via the filedir parameter
Affected: 6.64; 7.2
CVE-2026-85138
7.3
0%
Sep 3
SeaCMS WeChat index.php addslashes sql injection
Affected: 13.0; 13.1; 13.2; 13.3; 13.4; 13.5; +1 more
CVE-2026-85137
7.3
1%
Sep 3
SeaCMS Locoy Collector seacms_locoy_news.php parseIf code injection
Affected: 13.0; 13.1; 13.2; 13.3; 13.4; 13.5; +1 more
CVE-2026-82600
7.3
0%
Aug 31
SeaCMS zyapi.php sql injection
Affected: 13.0; 13.1; 13.2; 13.3; 13.4; 13.5; +1 more
CVE-2026-82598
7.3
1%
Aug 31
SeaCMS Template search.php parseIf code injection
Affected: 13.0; 13.1; 13.2; 13.3; 13.4; 13.5; +1 more
CVE-2025-15003
7.2
0%
Dec 21
SeaCMS admin_video.php sql injection
Affected: 13.0; 13.1; 13.2; 13.3
CVE-2025-11071
7.2
0%
Sep 27
SeaCMS Cron Task Management admin_cron.php sql injection
Affected: 13.3.20250820
CVE-2025-3797
7.2
1%
Apr 19
SeaCMS admin_topic.php sql injection
Affected: through 13.3
CVE-2025-3792
7.2
1%
Apr 18
SeaCMS admin_link.php sql injection
Affected: through 13.3
CVE-2024-44916
7.2
1%
Aug 30
Vulnerability in admin_ip.php in Seacms v13.1, when action=set, allows attackers to control IP parameters that are written to the data/admin/ip.php file and could result in…
Affected: 13.1
CVE-2023-44847
7.2
1%
Oct 10
An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin_ Weixin.php component
Affected: through 12.8
CVE-2022-48093
7.2
1%
Feb 1
Seacms v12.7 was discovered to contain a remote code execution (RCE) vulnerability via the ip parameter at admin_ ip.php
Affected: 12.7
CVE-2022-28076
7.2
2%
May 4
Seacms v11.6 was discovered to contain a remote command execution (RCE) vulnerability via the Mail Server Settings
Affected: 11.6
CVE-2018-19349
7.2
1%
Nov 17
In SeaCMS v6.64, there is SQL injection via the admin_makehtml.php topic parameter because of mishandling in include/mkhtml.func.php
Affected: 6.64
CVE-2018-16343
7.2
3%
Sep 2
SeaCMS 6.61 allows remote attackers to execute arbitrary code because parseIf() in include/main.class.php does not block use of $GLOBALS
Affected: 6.61
CVE-2024-42598
6.7
1%
Aug 20
SeaCMS 13.0 has a remote code execution vulnerability
Affected: 13.0
CVE-2024-40570
6.5
0%
Jun 17
SQL Injection vulnerability in SeaCMS v.12.9 allows a remote attacker to obtain sensitive information via the admin_datarelate.php component
Affected: 12.9
CVE-2025-25514
6.5
0%
Feb 25
Seacms <=13.3 is vulnerable to SQL Injection in admin_collect_news.php
Affected: through 13.3
CVE-2024-7161
6.5
0%
Jul 28
A vulnerability classified as problematic was found in SeaCMS 13.0
Affected: 13.0
CVE-2024-39036
6.5
1%
Jul 16
SeaCMS v12.9 is vulnerable to Arbitrary File Read via admin_safe.php
Affected: 12.9
CVE-2023-2926
6.5
1%
May 27
A vulnerability was found in SeaCMS 11.6 and classified as problematic
Affected: 11.6
CVE-2020-28846
6.5
0%
Aug 17
Cross Site Request Forgery (CSRF) vulnerability exists in SeaCMS 10.7 in admin_manager.php, which could let a malicious user add an admin account
Affected: 10.7
CVE-2020-36932
6.1
0%
Jan 25
Seacms 11.1 - 'checkuser' Stored XSS
Affected: through 11.1
CVE-2025-4257
6.1
0%
May 5
SeaCMS admin_pay.php cross site scripting
Affected: 13.2
CVE-2024-44920
6.1
0%
Sep 3
A cross-site scripting (XSS) vulnerability in the component admin_collect_news.php of SeaCMS v12.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload…
Affected: 12.9
CVE-2024-44683
6.1
0%
Aug 30
Seacms v13 is vulnerable to Cross Site Scripting (XSS) via admin-video.php
Affected: 13.0
CVE-2024-7163
6.1
0%
Jul 28
A vulnerability, which was classified as problematic, was found in SeaCMS 12.9
Affected: 12.9
CVE-2021-29313
6.1
1%
Aug 17
Cross Site Scripting (XSS) vulnerability exists in SeaCMS 12.6 via the (1) v_company and (2) v_tvs parameters in /admin_video.php,
Affected: 12.6
CVE-2020-26642
6.1
1%
May 28
A cross-site scripting (XSS) vulnerability has been discovered in the login page of SeaCMS version 11 which allows an attacker to inject arbitrary web script or HTML
Affected: 11.0
CVE-2018-17321
6.1
1%
Sep 22
An issue was discovered in SeaCMS 6.64
Affected: 6.64
CVE-2018-17062
6.1
1%
Sep 16
An issue was discovered in SeaCMS 6.64
Affected: 6.64
CVE-2018-14517
6.1
1%
Jul 23
SeaCMS 6.61 has two XSS issues in the admin_config.php file via certain form fields
Affected: 6.61
CVE-2018-11583
6.1
1%
May 31
SeaCMS 6.61 has stored XSS in admin_collect.php via the siteurl parameter
Affected: 6.61
CVE-2025-25799
6.0
0%
Feb 26
SeaCMS 13.3 was discovered to contain an arbitrary file read vulnerability in the file_get_contents function at admin_safe.php
Affected: 13.3
CVE-2026-82603
5.4
0%
Aug 31
SeaCMS Comment Cache member.php del_pl path traversal
Affected: 13.0; 13.1; 13.2; 13.3; 13.4; 13.5; +1 more
CVE-2026-82599
5.4
0%
Aug 31
SeaCMS Avatar Upload member.php unlink path traversal
Affected: 13.0; 13.1; 13.2; 13.3; 13.4; 13.5; +1 more
CVE-2025-50592
5.4
0%
Aug 5
Cross site scripting vulnerability in seacms before 13.2 via the vid parameter to Upload/js/player/dmplayer/player
Affected: before 13.2
Page 2 of 3 · 123 total
123