CVE-2024-46640

SeaCMS 13.2 has a remote code execution vulnerability located in the file sql.class.chp. Although the system has a check function, the check function is not executed during execution, allowing remote code execution by writing to the file through the MySQL slow query method.
CVSS

No CVSS.

References
Link Resource
https://gitee.com/zheng_botong/CVE-2024-46640 Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:seacms:seacms:13.2:*:*:*:*:*:*:*

History

28 Mar 2025, 17:12

Type Values Removed Values Added
References () https://gitee.com/zheng_botong/CVE-2024-46640 - () https://gitee.com/zheng_botong/CVE-2024-46640 - Exploit, Third Party Advisory
CPE cpe:2.3:a:seacms:seacms:13.2:*:*:*:*:*:*:*
First Time Seacms
Seacms seacms

20 Sep 2024, 21:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-09-20 21:15

Updated : 2025-03-28 17:12


NVD link : CVE-2024-46640

Mitre link : CVE-2024-46640


JSON object : View

Products Affected

seacms

  • seacms
CWE

No CWE.