CVE-2024-29275

SQL injection vulnerability in SeaCMS version 12.9, allows remote unauthenticated attackers to execute arbitrary code and obtain sensitive information via the id parameter in class.php.
CVSS

No CVSS.

References
Link Resource
https://github.com/seacms-net/CMS/issues/15 Exploit Vendor Advisory
https://github.com/seacms-net/CMS/issues/15 Exploit Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:seacms:seacms:12.9:*:*:*:*:*:*:*

History

28 Mar 2025, 16:51

Type Values Removed Values Added
First Time Seacms
Seacms seacms
References () https://github.com/seacms-net/CMS/issues/15 - () https://github.com/seacms-net/CMS/issues/15 - Exploit, Vendor Advisory
CPE cpe:2.3:a:seacms:seacms:12.9:*:*:*:*:*:*:*

22 Mar 2024, 05:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-03-22 05:15

Updated : 2025-03-28 16:51


NVD link : CVE-2024-29275

Mitre link : CVE-2024-29275


JSON object : View

Products Affected

seacms

  • seacms
CWE

No CWE.