5.1
Medium
CVE-2025-10662 A vulnerability has been found in SeaCMS up to 13.3
Description
A vulnerability has been found in SeaCMS up to 13.3. The impacted element is an unknown function of the file /admin_members.php?ac=editsave. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This affects another injection point than CVE-2025-25513.
Affected products and versions
References
- VDB-324783 | SeaCMS admin_members.php sql injection vuldb.com
- VDB-324783 | CTI Indicators (IOB, IOC, TTP, IOA) vuldb.com
- Submit #649866 | SeaCMS V13.3 SQL Injection vuldb.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of SeaCMS
The 23 CVEs of SeaCMS →
CVE-2026-85138
A vulnerability was detected in SeaCMS up to 13.6
6.9
Medium
CVE-2026-85137
A security vulnerability has been detected in SeaCMS up to 13.6
6.9
Medium
CVE-2026-82603
A vulnerability was detected in SeaCMS up to 13.6
5.3
Medium
CVE-2026-82602
A security vulnerability has been detected in SeaCMS up to 13.6
6.9
Medium