SeaCMS v12.9 has an unauthorized SQL injection vulnerability. The vulnerability is caused by the SQL injection through the cid parameter at /js/player/dmplayer/dmku/index.php?ac=edit, which can cause sensitive database information to be leaked.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://github.com/seacms-net/CMS/issues/17 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2024-07-05T00:00:00
Updated: 2024-08-02T04:19:20.590Z
Reserved: 2024-06-21T00:00:00
Link: CVE-2024-39027
Vulnrichment
Updated: 2024-07-23T15:36:18.953Z
NVD
Status : Analyzed
Published: 2024-07-05T14:15:02.997
Modified: 2024-07-08T15:48:01.000
Link: CVE-2024-39027
Redhat
No data.