5.3
Medium
CVE-2024-6416 A vulnerability was found in SeaCMS 12.9
Description
A vulnerability was found in SeaCMS 12.9. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /js/player/dmplayer/dmku/?ac=edit. The manipulation of the argument cid with the input (select(0)from(select(sleep(10)))v) leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-270007.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SeaCMS | 12.9 | No fix stated |
References
- VDB-270007 | SeaCMS sql injection vuldb.com
- VDB-270007 | CTI Indicators (IOB, IOC, TTP, IOA) vuldb.com
- Submit #363407 | SeaCMS 12.9 SQL Injection vuldb.com
- fushuling.com fushuling.com
Timeline
- Published
- Last modified
Other CVEs of SeaCMS
The 23 CVEs of SeaCMS →
CVE-2026-85138
A vulnerability was detected in SeaCMS up to 13.6
6.9
Medium
CVE-2026-85137
A security vulnerability has been detected in SeaCMS up to 13.6
6.9
Medium
CVE-2026-82603
A vulnerability was detected in SeaCMS up to 13.6
5.3
Medium
CVE-2026-82602
A security vulnerability has been detected in SeaCMS up to 13.6
6.9
Medium