CVE-2025-11071

Medium CVSS: 5.1

A security vulnerability has been detected in SeaCMS 13.3.20250820. Impacted is an unknown function of the file /admin_cron.php of the component Cron Task Management Module. The manipulation of the argument resourcefrom/collectID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.

Vendor

Seacms

Product

Seacms

CWE

CWE-74

Yayın Tarihi

2025-09-27 18:15:36

Güncelleme

2025-10-10 18:37:42

Source Identifier

cna@vuldb.com

KEV Date Added

Kategoriler

CWE-74 Seacms MEDIUM Seacms 2025

Referanslar

https://github.com/Hebing123/cve/issues/93 https://vuldb.com/?ctiid.326112 https://vuldb.com/?id.326112 https://vuldb.com/?submit.659883

Benzer Kayıtlar

Medium

CVE-2020-36932

SeaCMS 11.1 contains a stored cross-site scripting vulnerability in the checkuser parameter of the admin settings page.…

Medium

CVE-2025-15003

A vulnerability was found in SeaCMS up to 13.3. The impacted element is an unknown function of the file admin_video.php.…

Medium

CVE-2025-15002

A vulnerability has been found in SeaCMS up to 13.3. The affected element is an unknown function of the file js/player/d…

Medium

CVE-2025-60449

An information disclosure vulnerability has been discovered in SeaCMS 13.1. The vulnerability exists in the admin_safe.p…

Medium

CVE-2025-10662

A vulnerability has been found in SeaCMS up to 13.3. The impacted element is an unknown function of the file /admin_memb…

Medium

CVE-2025-50592

Cross site scripting vulnerability in seacms before 13.2 via the vid parameter to Upload/js/player/dmplayer/player.