CVE-2023-44171: Path Traversal

Published Sep 26, 2023

Updated

SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component adminsmtp.php.

Affected Software

1 affected component

SEACMS SEACMS=12.9

Event History

Sep 26, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is CVE-2023-44171?

CVE-2023-44171 is the identifier for a critical vulnerability in SeaCMS version 12.9 that allows an attacker to write arbitrary files using the component admin_smtp.php.

How severe is CVE-2023-44171?

CVE-2023-44171 has a severity score of 9.8, which is considered critical.

How does CVE-2023-44171 affect SeaCMS?

CVE-2023-44171 affects SeaCMS version 12.9.

What is the solution for CVE-2023-44171?

To fix CVE-2023-44171, it is recommended to update SeaCMS to a version that is not affected by the vulnerability.

Where can I find more information about CVE-2023-44171?

You can find more information about CVE-2023-44171 in the following reference: [SeaCMS V12.9 Arbitrary file write vulnerability](https://github.com/H3ppo/vulnerabilities/blob/main/SeaCMS%20V12.9%20Arbitrary%20file%20write%20vulnerability.pdf).