exploitDog

CVE-2018-16343

Опубликовано: 02 сент. 2018

Источник: nvd

CVSS3: 7.2

CVSS2: 6.5

EPSS Низкий

Описание

SeaCMS 6.61 allows remote attackers to execute arbitrary code because parseIf() in include/main.class.php does not block use of $GLOBALS.

Ссылки

http://zhinianyuxin.postach.io/post/seacms-v6-61-latest-version-backend-rce
Exploit
Third Party Advisory
https://github.com/cumtxujiabin/CmsPoc/blob/master/Seacms_v6.61_backend_RCE.md
Exploit
Third Party Advisory
http://zhinianyuxin.postach.io/post/seacms-v6-61-latest-version-backend-rce
Exploit
Third Party Advisory
https://github.com/cumtxujiabin/CmsPoc/blob/master/Seacms_v6.61_backend_RCE.md
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:seacms:seacms:6.61:*:*:*:*:*:*:*

EPSS

Процентиль: 87%

0.03181

Низкий

7.2 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-94

Связанные уязвимости

GHSA-9rx6-4w3c-8329

CVSS3: 7.2

github

больше 3 лет назад

SeaCMS 6.61 allows remote attackers to execute arbitrary code because parseIf() in include/main.class.php does not block use of $GLOBALS.

EPSS

Процентиль: 87%

0.03181

Низкий

7.2 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-94