Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vqv4-c7v8-752q

Опубликовано: 05 июл. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

SeaCMS v12.9 has an unauthorized SQL injection vulnerability. The vulnerability is caused by the SQL injection through the cid parameter at /js/player/dmplayer/dmku/index.php?ac=edit, which can cause sensitive database information to be leaked.

SeaCMS v12.9 has an unauthorized SQL injection vulnerability. The vulnerability is caused by the SQL injection through the cid parameter at /js/player/dmplayer/dmku/index.php?ac=edit, which can cause sensitive database information to be leaked.

EPSS

Процентиль: 29%
0.00107
Низкий

7.5 High

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 7.5
nvd
больше 1 года назад

SeaCMS v12.9 has an unauthorized SQL injection vulnerability. The vulnerability is caused by the SQL injection through the cid parameter at /js/player/dmplayer/dmku/index.php?ac=edit, which can cause sensitive database information to be leaked.

EPSS

Процентиль: 29%
0.00107
Низкий

7.5 High

CVSS3

Дефекты

CWE-89