SeaCMS v12.9 has an unauthorized SQL injection vulnerability. The vulnerability is caused by the SQL injection through the cid parameter at /js/player/dmplayer/dmku/index.php?ac=edit, which can cause sensitive database information to be leaked.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2024-07-05T00:00:00

Updated: 2024-08-02T04:19:20.590Z

Reserved: 2024-06-21T00:00:00

Link: CVE-2024-39027

cve-icon Vulnrichment

Updated: 2024-07-23T15:36:18.953Z

cve-icon NVD

Status : Analyzed

Published: 2024-07-05T14:15:02.997

Modified: 2024-07-08T15:48:01.000

Link: CVE-2024-39027

cve-icon Redhat

No data.