CVE-2025-15003

Medium CVSS: 5.1

A vulnerability was found in SeaCMS up to 13.3. The impacted element is an unknown function of the file admin_video.php. Performing a manipulation of the argument e_id results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used.

Vendor

Seacms

Product

Seacms

CWE

CWE-74

Yayın Tarihi

2025-12-22 00:15:49

Güncelleme

2026-02-24 06:16:33

Source Identifier

cna@vuldb.com

KEV Date Added

Kategoriler

CWE-74 Seacms MEDIUM Seacms 2025

Referanslar

https://note-hxlab.wetolink.com/share/aTI1wPFLm7FG https://vuldb.com/?ctiid.337708 https://vuldb.com/?id.337708 https://vuldb.com/?submit.716084

Benzer Kayıtlar

Medium

CVE-2020-36932

SeaCMS 11.1 contains a stored cross-site scripting vulnerability in the checkuser parameter of the admin settings page.…

Medium

CVE-2025-15002

A vulnerability has been found in SeaCMS up to 13.3. The affected element is an unknown function of the file js/player/d…

Medium

CVE-2025-60449

An information disclosure vulnerability has been discovered in SeaCMS 13.1. The vulnerability exists in the admin_safe.p…

Medium

CVE-2025-11071

A security vulnerability has been detected in SeaCMS 13.3.20250820. Impacted is an unknown function of the file /admin_c…

Medium

CVE-2025-10662

A vulnerability has been found in SeaCMS up to 13.3. The impacted element is an unknown function of the file /admin_memb…

Medium

CVE-2025-50592

Cross site scripting vulnerability in seacms before 13.2 via the vid parameter to Upload/js/player/dmplayer/player.