CVE-2024-46640
SeaCMS 13.2 has a remote code execution vulnerability located in the file sql.class.chp. Although the system has a check function, the check function is not executed during exec…
Published: 2024-09-20 · CVSS: 9.8 · CVSS 3.1
SeaCMS 13.2 has a remote code execution vulnerability located in the file sql.class.chp. Although the system has a check function, the check function is not executed during execution, allowing remote code execution by writing to the file through the MySQL slow query method.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7