Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-46640 EUVD-2024-41922GHSA-c83g-2v28-2jp8

SeaCMS 13.2 has a remote code execution vulnerability located in the file sql.class.chp. Although the system has a check function, the chec…

Published Sep 20, 2024 · Updated Sep 23, 2024 · Assigned by mitre

Description

SeaCMS 13.2 has a remote code execution vulnerability located in the file sql.class.chp. Although the system has a check function, the check function is not executed during execution, allowing remote code execution by writing to the file through the MySQL slow query method.

References