CVE-2024-40519

SeaCMS 12.9 has a remote code execution vulnerability

High · published July 12, 2024

CVSS v3.1
8.8
EPSS
1%
Percentile
64.8
In the wild
Unconfirmed
What it is

SeaCMS 12.9 has a remote code execution vulnerability. The vulnerability is caused by admin_smtp.php directly splicing and writing the user input data into weixin.php without processing it, which allows authenticated attackers to exploit the vulnerability to execute arbitrary commands and obtain system permissions.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01080 · 64.8th percentile
Published
2024-07-12T00:00Z
EPSS history
Timeline
  • 12 JUL 00:00Z
    SeaCMS 12.9 has a remote code execution vulnerability
    cvelistv5