CVE-2025-15002

Medium CVSS: 6.9

A vulnerability has been found in SeaCMS up to 13.3. The affected element is an unknown function of the file js/player/dmplayer/dmku/class/mysqli.class.php. Such manipulation of the argument page/limit leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.

Vendor

Seacms

Product

Seacms

CWE

CWE-74

Yayın Tarihi

2025-12-21 23:15:48

Güncelleme

2025-12-30 22:20:25

Source Identifier

cna@vuldb.com

KEV Date Added

Kategoriler

CWE-74 Seacms MEDIUM Seacms 2025

Referanslar

https://note-hxlab.wetolink.com/share/VFwALb6qhnTZ https://vuldb.com/?ctiid.337707 https://vuldb.com/?id.337707 https://vuldb.com/?submit.716083

Benzer Kayıtlar

Medium

CVE-2020-36932

SeaCMS 11.1 contains a stored cross-site scripting vulnerability in the checkuser parameter of the admin settings page.…

Medium

CVE-2025-15003

A vulnerability was found in SeaCMS up to 13.3. The impacted element is an unknown function of the file admin_video.php.…

Medium

CVE-2025-60449

An information disclosure vulnerability has been discovered in SeaCMS 13.1. The vulnerability exists in the admin_safe.p…

Medium

CVE-2025-11071

A security vulnerability has been detected in SeaCMS 13.3.20250820. Impacted is an unknown function of the file /admin_c…

Medium

CVE-2025-10662

A vulnerability has been found in SeaCMS up to 13.3. The impacted element is an unknown function of the file /admin_memb…

Medium

CVE-2025-50592

Cross site scripting vulnerability in seacms before 13.2 via the vid parameter to Upload/js/player/dmplayer/player.