critical9.8
CVE-2024-46640
SeaCMS 13.2 has a remote code execution vulnerability located in the file sql.class.chp.
Impact
SeaCMS 13.2 has a remote code execution vulnerability located in the file sql.class.chp. Although the system has a check function, the check function is not executed during execution, allowing remote code execution by writing to the file through the MySQL slow query method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Seacms | Seacms | Version 13.2 |