CVE-2024-29275: SQL Injection

Published Mar 22, 2024

Updated

SQL injection vulnerability in SeaCMS version 12.9, allows remote unauthenticated attackers to execute arbitrary code and obtain sensitive information via the id parameter in class.php.

Affected Software

2 affected components

SEACMS SEACMS

SEACMS SEACMS=12.9

Event History

Mar 22, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·05:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-29275?

CVE-2024-29275 is classified as a critical vulnerability due to its potential for remote code execution and unauthorized access to sensitive information.

How do I fix CVE-2024-29275?

To fix CVE-2024-29275, update SeaCMS to the latest version that addresses this SQL injection vulnerability.

What are the potential impacts of CVE-2024-29275?

The potential impacts of CVE-2024-29275 include unauthorized data access, arbitrary code execution, and compromise of sensitive information.

Who is affected by CVE-2024-29275?

CVE-2024-29275 affects users of SeaCMS version 12.9 who have not implemented any security measures to mitigate SQL injection vulnerabilities.

Can CVE-2024-29275 be exploited remotely?

Yes, CVE-2024-29275 can be exploited by remote unauthenticated attackers through the id parameter in class.php.