CVE-2018-16343

SeaCMS 6.61 allows remote attackers to execute arbitrary code because parseIf() in include/main.class.php does not block use of $GLOBALS

published September 2, 2018

CVSS
—
EPSS
3%
Percentile
85.8
In the wild
Unconfirmed
What it is

SeaCMS 6.61 allows remote attackers to execute arbitrary code because parseIf() in include/main.class.php does not block use of $GLOBALS.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02703 · 85.8th percentile
Published
2018-09-02T18:00Z
EPSS history
Timeline
  • 02 SEP 18:00Z
    SeaCMS 6.61 allows remote attackers to execute arbitrary code because parseIf() in include/main.class.php does not block use of $GLOBALS
    cvelistv5