| Titolo | Seacms SeaCMS 13.1 Code Injection |
|---|
| Descrizione | SeaCMS 13.1 has a remote code execution vulnerability. This vulnerability is caused by the fact that although admin_template.php imposes certain restrictions on edited files, an attacker can still bypass these restrictions and write code in a way that allows an authenticated attacker to exploit the vulnerability to execute arbitrary commands and gain system privileges.
Please check the link below for more details
https://gitee.com/A0kooo/cve_article/blob/master/seacms/seacms%20admin_template.php%20code%20injection.md |
|---|
| Fonte | ⚠️ https://gitee.com/A0kooo/cve_article/blob/master/seacms/seacms%20admin_template.php%20code%20injection.md |
|---|
| Utente | 0kooo (UID 73212) |
|---|
| Sottomissione | 17/08/2024 01:57 (2 anni fa) |
|---|
| Moderazione | 19/08/2024 15:57 (3 days later) |
|---|
| Stato | Duplicato |
|---|
| Voce VulDB | 271373 [SeaCMS 12.9 admin_template.php Esecuzione di codice remoto] |
|---|
| Punti | 0 |
|---|