Show filters
142 Total Results
Displaying 71-80 of 142
Sort by:
Attacker Value
Unknown
CVE-2022-27336
Disclosure Date: April 27, 2022 (last updated October 07, 2023)
Seacms v11.6 was discovered to contain a remote code execution (RCE) vulnerability via the component /admin/weixin.php.
0
Attacker Value
Unknown
CVE-2022-24652
Disclosure Date: March 10, 2022 (last updated February 23, 2025)
sentcms 4.0.x allows remote attackers to cause arbitrary file uploads through an unauthorized file upload interface, resulting in php code execution in /admin/upload/upload.
0
Attacker Value
Unknown
CVE-2022-24651
Disclosure Date: March 10, 2022 (last updated February 23, 2025)
sentcms 4.0.x allows remote attackers to cause arbitrary file uploads through an unauthorized file upload interface, resulting in PHP code execution through /user/upload/upload.
0
Attacker Value
Unknown
CVE-2022-23878
Disclosure Date: March 02, 2022 (last updated October 07, 2023)
seacms V11.5 is affected by an arbitrary code execution vulnerability in admin_config.php.
0
Attacker Value
Unknown
CVE-2020-18081
Disclosure Date: December 17, 2021 (last updated February 23, 2025)
The checkuser function of SEMCMS 3.8 was discovered to contain a vulnerability which allows attackers to obtain the password in plaintext through a SQL query.
0
Attacker Value
Unknown
CVE-2020-18078
Disclosure Date: December 17, 2021 (last updated October 07, 2023)
A vulnerability in /include/web_check.php of SEMCMS v3.8 allows attackers to reset the Administrator account's password.
0
Attacker Value
Unknown
CVE-2021-37358
Disclosure Date: August 18, 2021 (last updated February 23, 2025)
SQL Injection in SEACMS v210530 (2021-05-30) allows remote attackers to execute arbitrary code via the component "admin_ajax.php?action=checkrepeat&v_name=".
0
Attacker Value
Unknown
CVE-2021-29313
Disclosure Date: August 17, 2021 (last updated February 23, 2025)
Cross Site Scripting (XSS) vulnerability exists in SeaCMS 12.6 via the (1) v_company and (2) v_tvs parameters in /admin_video.php,
0
Attacker Value
Unknown
CVE-2020-28846
Disclosure Date: August 17, 2021 (last updated February 23, 2025)
Cross Site Request Forgery (CSRF) vulnerability exists in SeaCMS 10.7 in admin_manager.php, which could let a malicious user add an admin account.
0
Attacker Value
Unknown
CVE-2020-26642
Disclosure Date: May 28, 2021 (last updated February 22, 2025)
A cross-site scripting (XSS) vulnerability has been discovered in the login page of SeaCMS version 11 which allows an attacker to inject arbitrary web script or HTML.
0
