SeaCMS v12.9 has an unauthorized SQL injection vulnerability. The vulnerability is caused by the SQL injection through the cid parameter at /js/player/dmplayer/dmku/index.php?ac=edit, which can cause sensitive database information to be leaked.
References
Link | Resource |
---|---|
https://github.com/seacms-net/CMS/issues/17 | Exploit Issue Tracking |
https://github.com/seacms-net/CMS/issues/17 | Exploit Issue Tracking |
Configurations
History
21 Nov 2024, 09:27
Type | Values Removed | Values Added |
---|---|---|
References | () https://github.com/seacms-net/CMS/issues/17 - Exploit, Issue Tracking |
08 Jul 2024, 15:48
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:seacms:seacms:12.9:*:*:*:*:*:*:* | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
Summary |
|
|
References | () https://github.com/seacms-net/CMS/issues/17 - Exploit, Issue Tracking | |
First Time |
Seacms seacms
Seacms |
|
CWE | CWE-89 |
05 Jul 2024, 14:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-07-05 14:15
Updated : 2024-11-21 09:27
NVD link : CVE-2024-39027
Mitre link : CVE-2024-39027
CVE.ORG link : CVE-2024-39027
JSON object : View
Products Affected
seacms
- seacms
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')