Description
SeaCMS through 8.7 contains an unauthenticated SQL injection vulnerability that allows remote attackers to manipulate database queries by injecting SQL through the rlist[] array parameter. Attackers can send GET requests to /comment/api/index.php with crafted rlist[] values using backtick-quoted variables and extractvalue to extract database information via error messages. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-14.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SeaCMS | SeaCMS | ≤ 8.7 | — |
References
- uedbox Blog technical-description exploit
- Nuclei Template technical-description
- Product Webpage product
- VulnCheck Advisory: SeaCMS 8.7 SQL Injection via comment/api/index.php rlist Parameter third-party-advisory