high7.5
CVE-2024-39027
SeaCMS v12.9 has an unauthorized SQL injection vulnerability.
Impact
SeaCMS v12.9 has an unauthorized SQL injection vulnerability. The vulnerability is caused by the SQL injection through the cid parameter at /js/player/dmplayer/dmku/index.php?ac=edit, which can cause sensitive database information to be leaked.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Seacms | Seacms | Version 12.9 |