CVE-2025-44071: Code Injection
Published May 5, 2025
·Updated
SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component phomebak.php. This vulnerability allows attackers to execute arbitrary code via a crafted request.
Affected Software
2 affected components
SEACMS SEACMS
SEACMS SEACMS=13.3
Event History
May 5, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-44071?
CVE-2025-44071 has a high severity rating due to its potential for remote code execution.
2
How do I fix CVE-2025-44071?
To fix CVE-2025-44071, you should update SeaCMS to the latest version that addresses this vulnerability.
3
What kind of attack can exploit CVE-2025-44071?
CVE-2025-44071 can be exploited via crafted requests to execute arbitrary code on the server.
4
Is CVE-2025-44071 present in all versions of SeaCMS?
CVE-2025-44071 specifically affects SeaCMS v13.3 and may not be present in other versions.
5
What components are affected by CVE-2025-44071?
CVE-2025-44071 primarily affects the component phomebak.php in SeaCMS.