Login Request a demo
SE
Vendor
Seacms
1 product with CVEs on record
123
CVEs
0
On KEV
1
New 30D
Products
SE
Seacms
Seacms
9.8
123 CVEs0 on KEV1 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2019-25778
New
SE
SeaCMS
SeaCMS
8.2
0%
Oct 22SeaCMS 8.7 SQL Injection via comment/api/index.php rlist Parameter
CVE-2026-85138
SE
SeaCMS
Seacms
7.3
0%
Sep 3SeaCMS WeChat index.php addslashes sql injection
CVE-2026-85137
SE
SeaCMS
Seacms
7.3
1%
Sep 3SeaCMS Locoy Collector seacms_locoy_news.php parseIf code injection
CVE-2026-82603
SE
SeaCMS
Seacms
5.4
0%
Aug 31SeaCMS Comment Cache member.php del_pl path traversal
CVE-2026-82602
SE
SeaCMS
Seacms
5.3
1%
Aug 31SeaCMS ass.php authorization
CVE-2026-82601
SE
SeaCMS
Seacms
4.3
0%
Aug 31SeaCMS err.php cross site scripting
CVE-2026-82600
SE
SeaCMS
Seacms
7.3
0%
Aug 31SeaCMS zyapi.php sql injection
CVE-2026-82599
SE
SeaCMS
Seacms
5.4
0%
Aug 31SeaCMS Avatar Upload member.php unlink path traversal
CVE-2026-82598
SE
SeaCMS
Seacms
7.3
1%
Aug 31SeaCMS Template search.php parseIf code injection
CVE-2020-36932
SE
Seacms
Seacms
6.1
0%
Jan 25Seacms 11.1 - 'checkuser' Stored XSS
CVE-2025-15003
SE
SeaCMS
Seacms
7.2
0%
Dec 21SeaCMS admin_video.php sql injection
CVE-2025-15002
SE
SeaCMS
Seacms
9.8
0%
Dec 21SeaCMS mysqli.class.php sql injection
CVE-2025-60449
SE
Seacms
Seacms
4.9
0%
Oct 3An information disclosure vulnerability has been discovered in SeaCMS 13.1
CVE-2025-11071
SE
Seacms
Seacms
7.2
0%
Sep 27SeaCMS Cron Task Management admin_cron.php sql injection
CVE-2025-10662
SE
Seacms
Seacms
9.8
0%
Sep 18SeaCMS admin_members.php sql injection
CVE-2025-50592
SE
Seacms
Seacms
5.4
0%
Aug 5Cross site scripting vulnerability in seacms before 13.2 via the vid parameter to Upload/js/player/dmplayer/player
CVE-2025-6864
SE
Seacms
Seacms
4.3
0%
Jun 29SeaCMS admin_type.php cross-site request forgery
CVE-2024-40570
SE
Seacms
Seacms
6.5
0%
Jun 17SQL Injection vulnerability in SeaCMS v.12.9 allows a remote attacker to obtain sensitive information via the admin_datarelate.php component
CVE-2025-44073
SE
Seacms
Seacms
9.8
0%
May 6SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component admin_comment_news.php
CVE-2025-4257
SE
Seacms
Seacms
6.1
0%
May 5SeaCMS admin_pay.php cross site scripting
CVE-2025-4256
SE
Seacms
Seacms
5.4
0%
May 5SeaCMS admin_paylog.php cross site scripting
CVE-2025-44072
SE
Seacms
Seacms
9.8
1%
May 5SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component admin_manager.php
CVE-2025-44074
SE
Seacms
Seacms
9.8
1%
May 5SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component admin_topic.php
CVE-2025-44071
SE
Seacms
Seacms
9.8
1%
May 5SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component phomebak.php
CVE-2025-3797
SE
Seacms
Seacms
7.2
1%
Apr 19SeaCMS admin_topic.php sql injection
CVE-2025-3792
SE
Seacms
Seacms
7.2
1%
Apr 18SeaCMS admin_link.php sql injection
CVE-2025-29647
SE
Seacms
Seacms
9.8
1%
Apr 3SeaCMS v13.3 has a SQL injection vulnerability in the component admin_tempvideo.php
CVE-2025-25792
SE
Seacms
Seacms
4.4
0%
Feb 26SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the isopen parameter at admin_weixin.php
CVE-2025-25793
SE
Seacms
Seacms
5.1
0%
Feb 26SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin_notify.php
CVE-2025-25800
SE
Seacms
Seacms
5.3
0%
Feb 26SeaCMS 13.3 was discovered to contain an arbitrary file read vulnerability in the file_get_contents function at admin_safe_file.php
CVE-2025-25794
SE
Seacms
Seacms
5.1
0%
Feb 26SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin_ping.php
CVE-2025-25802
SE
Seacms
Seacms
5.1
0%
Feb 26SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin_ip.php
CVE-2025-25813
SE
Seacms
Seacms
5.1
0%
Feb 26SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin_files.php
CVE-2025-25799
SE
Seacms
Seacms
6.0
0%
Feb 26SeaCMS 13.3 was discovered to contain an arbitrary file read vulnerability in the file_get_contents function at admin_safe.php
CVE-2025-25796
SE
Seacms
Seacms
5.1
0%
Feb 26SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin_template.php
CVE-2025-25797
SE
Seacms
Seacms
5.1
0%
Feb 26SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin_smtp.php
CVE-2025-25521
SE
Seacms
Seacms
9.8
1%
Feb 25Seacms <=13.3 is vulnerable to SQL Injection in admin_type_news.php
CVE-2025-25520
SE
Seacms
Seacms
9.8
1%
Feb 25Seacms <13.3 is vulnerable to SQL Injection in admin_pay.php
CVE-2025-25516
SE
Seacms
Seacms
9.8
1%
Feb 25Seacms <=13.3 is vulnerable to SQL Injection in admin_paylog.php
CVE-2025-25517
SE
Seacms
Seacms
9.8
1%
Feb 25Seacms <=13.3 is vulnerable to SQL Injection in admin_reslib.php
CVE-2025-25519
SE
Seacms
Seacms
9.8
1%
Feb 25Seacms <=13.3 is vulnerable to SQL Injection in admin_zyk.php
CVE-2025-25514
SE
Seacms
Seacms
6.5
0%
Feb 25Seacms <=13.3 is vulnerable to SQL Injection in admin_collect_news.php
CVE-2025-25515
SE
Seacms
Seacms
8.8
1%
Feb 25Seacms <=13.3 is vulnerable to SQL Injection in admin_collect.php that allows an authenticated attacker to exploit the database
CVE-2025-25513
SE
Seacms
Seacms
9.8
1%
Feb 24Seacms <=13.3 is vulnerable to SQL Injection in admin_members.php
CVE-2025-22974
SE
Seacms
Seacms
9.8
1%
Feb 24SQL Injection vulnerability in SeaCMS v.13.2 and before allows a remote attacker to execute arbitrary code via the DoTranExecSql parameter in the phome.php component
CVE-2024-54880
SE
Seacms
Seacms
9.1
1%
Jan 6SeaCMS V13.1 is vulnerable to Incorrect Access Control
CVE-2024-54879
SE
Seacms
Seacms
9.1
1%
Jan 6SeaCMS V13.1 is vulnerable to Incorrect Access Control
CVE-2024-55461
SE
Seacms
Seacms
9.8
1%
Dec 18SeaCMS <=13.0 is vulnerable to command execution in phome.php via the function Ebak_RepPathFiletext()
CVE-2024-50808
SE
Seacms
Seacms
8.8
1%
Nov 8SeaCms 13.1 is vulnerable to code injection in the notification module of the member message notification module in the backend user module, due to unsafe handling of the "notify"…
CVE-2024-46640
SE
Seacms
Seacms
9.8
1%
Sep 20SeaCMS 13.2 has a remote code execution vulnerability located in the file sql.class.chp
CVE-2024-44720
SE
Seacms
Seacms
7.5
1%
Sep 9SeaCMS v13.1 was discovered to an arbitrary file read vulnerability via the component admin_safe.php
CVE-2024-44721
SE
Seacms
Seacms
9.8
1%
Sep 9SeaCMS v13.1 was discovered to a Server-Side Request Forgery (SSRF) via the url parameter at /admin_reslib.php
CVE-2024-44921
SE
Seacms
Seacms
9.8
1%
Sep 3SeaCMS v12.9 was discovered to contain a SQL injection vulnerability via the id parameter at /dmplayer/dmku/index.php?ac=del
CVE-2024-44920
SE
Seacms
Seacms
6.1
0%
Sep 3A cross-site scripting (XSS) vulnerability in the component admin_collect_news.php of SeaCMS v12.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload…
CVE-2024-44683
SE
Seacms
Seacms
6.1
0%
Aug 30Seacms v13 is vulnerable to Cross Site Scripting (XSS) via admin-video.php
CVE-2024-44918
SE
Seacms
Seacms
3.5
0%
Aug 30A cross-site scripting (XSS) vulnerability in the component admin_datarelate.php of SeaCMS v12.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
CVE-2024-44916
SE
Seacms
Seacms
7.2
1%
Aug 30Vulnerability in admin_ip.php in Seacms v13.1, when action=set, allows attackers to control IP parameters that are written to the data/admin/ip.php file and could result in…
CVE-2024-44919
SE
Seacms
Seacms
5.4
0%
Aug 29A cross-site scripting (XSS) vulnerability in the component admin_ads.php of SeaCMS v12.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected…
CVE-2024-41444
SE
Seacms
Seacms
9.8
0%
Aug 26SeaCMS v12.9 has a SQL injection vulnerability in the key parameter of /js/player/dmplayer/dmku/index.php?ac=so
CVE-2024-42599
SE
Seacms
Seacms
8.8
1%
Aug 22SeaCMS 13.0 has a remote code execution vulnerability