CVE-2025-15003: SeaCMS admin_video.php sql injection

Published Dec 21, 2025
·
Updated

A vulnerability was found in SeaCMS up to 13.3. The impacted element is an unknown function of the file adminvideo.php. Performing a manipulation of the argument eid results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used.

Affected Software

2 affected components
SEACMS SEACMS<=13.3
SEACMS SEACMS>=13.0<=13.3

Event History

Dec 21, 2025
CVE Published
via MITRE·11:32 PM
Data Sourced
via MITRE·11:32 PM
DescriptionSeverityWeakness
Dec 22, 2025
Data Sourced
via NVD·12:15 AM
DescriptionSeverityWeaknessAffected Software
Apr 5, 57968
Event
via NVD·12:03 PM

Frequently Asked Questions

1

What is the severity of CVE-2025-15003?

CVE-2025-15003 has been assessed as a high severity vulnerability due to its potential for remote SQL injection exploits.

2

How do I fix CVE-2025-15003?

To fix CVE-2025-15003, update SeaCMS to version 13.4 or later to mitigate the SQL injection vulnerability.

3

What types of attacks are possible with CVE-2025-15003?

CVE-2025-15003 allows for remote SQL injection attacks, which can lead to unauthorized data access or manipulation.

4

Which versions of SeaCMS are affected by CVE-2025-15003?

CVE-2025-15003 affects SeaCMS versions up to and including 13.3.

5

Is the exploit for CVE-2025-15003 publicly available?

Yes, the exploit for CVE-2025-15003 has been made public, increasing the urgency to address the vulnerability.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203