SeaCMS 13.0 has a remote code execution vulnerability. The reason for this vulnerability is that although admin_editplayer.php imposes restrictions on edited files, attackers can still bypass these restrictions and write code, allowing authenticated attackers to exploit the vulnerability to execute arbitrary commands and gain system privileges.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://gitee.com/fushuling/cve/blob/master/CVE-2024-42598.md | Exploit Third Party Advisory |
| https://gitee.com/fushuling/cve/blob/master/SeaCMS%20V13%20admin_editplayer.php%20code%20injection.md | Exploit Third Party Advisory |
Configurations
History
28 Mar 2025, 16:53
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://gitee.com/fushuling/cve/blob/master/CVE-2024-42598.md - Exploit, Third Party Advisory | |
| References | () https://gitee.com/fushuling/cve/blob/master/SeaCMS%20V13%20admin_editplayer.php%20code%20injection.md - Exploit, Third Party Advisory | |
| CPE | cpe:2.3:a:seacms:seacms:13.0:*:*:*:*:*:*:* | |
| First Time |
Seacms
Seacms seacms |
22 Aug 2024, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
20 Aug 2024, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-08-20 16:15
Updated : 2025-03-28 16:53
NVD link : CVE-2024-42598
Mitre link : CVE-2024-42598
JSON object : View
Products Affected
seacms
- seacms
CWE
No CWE.