6.9
Medium
CVE-2025-15002 A vulnerability has been found in SeaCMS up to 13.3
Description
A vulnerability has been found in SeaCMS up to 13.3. The affected element is an unknown function of the file js/player/dmplayer/dmku/class/mysqli.class.php. Such manipulation of the argument page/limit leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.
Affected products and versions
References
- VDB-337707 | SeaCMS mysqli.class.php sql injection vuldb.com
- VDB-337707 | CTI Indicators (IOB, IOC, TTP, IOA) vuldb.com
- Submit #716083 | SeaCMS 13.3 SQL Injection vuldb.com
- note-hxlab.wetolink.com note-hxlab.wetolink.com
Timeline
- Published
- Last modified
Other CVEs of SeaCMS
The 23 CVEs of SeaCMS →
CVE-2026-85138
A vulnerability was detected in SeaCMS up to 13.6
6.9
Medium
CVE-2026-85137
A security vulnerability has been detected in SeaCMS up to 13.6
6.9
Medium
CVE-2026-82603
A vulnerability was detected in SeaCMS up to 13.6
5.3
Medium
CVE-2026-82602
A security vulnerability has been detected in SeaCMS up to 13.6
6.9
Medium