CVE-2024-50808: Code Injection
Published Nov 8, 2024
·Updated
SeaCms 13.1 is vulnerable to code injection in the notification module of the member message notification module in the backend user module, due to unsafe handling of the "notify" variable in adminnotify.php.
Affected Software
2 affected components
SEACMS SEACMS
SEACMS SEACMS=13.1
Event History
Nov 8, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-50808?
CVE-2024-50808 is classified as a high severity vulnerability due to the potential for code injection.
2
How do I fix CVE-2024-50808?
To fix CVE-2024-50808, ensure proper validation and sanitization of the 'notify' variable in the admin_notify.php file.
3
What software versions are affected by CVE-2024-50808?
CVE-2024-50808 affects SeaCms version 13.1.
4
What type of vulnerability is CVE-2024-50808?
CVE-2024-50808 is a code injection vulnerability found in the notification module of SeaCms.
5
What aspect of the application does CVE-2024-50808 impact?
CVE-2024-50808 impacts the backend user module related to member message notifications.