A vulnerability has been found in SeaCMS up to 13.3. The affected element is an unknown function of the file js/player/dmplayer/dmku/class/mysqli.class.php. Such manipulation of the argument page/lim…
High CVSS 7.3
Summary
A vulnerability has been found in SeaCMS up to 13.3. The affected element is an unknown function of the file js/player/dmplayer/dmku/class/mysqli.class.php. Such manipulation of the argument page/limit leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://note-hxlab.wetolink.com/share/VFwALb6qhnTZ Exploit
- https://vuldb.com/?ctiid.337707 Permissions Required
- https://vuldb.com/?id.337707 Third Party Advisory
- https://vuldb.com/?submit.716083 Third Party Advisory
Timeline
- nvd_ingest NVD