Skip to content
OpenAdvisories

Vendor

SeaCMS

2 known vulnerabilities.

Products

SeaCMS 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2019-25778

    SeaCMS 8.7 SQL Injection via comment/api/index.php rlist Parameter

    SeaCMS through 8.7 contains an unauthenticated SQL injection vulnerability that allows remote attackers to manipulate database queries by injecting SQL through the rlist[] array parameter. Attackers can send GET requests to /comment/api/index.php with crafted…

    SeaCMS SeaCMS