SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component adminfiles.php.

SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component adminip.php.

SeaCMS 13.3 was discovered to contain an arbitrary file read vulnerability in the filegetcontents function at adminsafefile.php.

SeaCMS 13.3 was discovered to contain an arbitrary file read vulnerability in the filegetcontents function at adminsafe.php.

SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component adminsmtp.php.

SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admintemplate.php.

SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component adminping.php.

SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the isopen parameter at adminweixin.php.

SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component adminnotify.php.

Seacms <13.3 is vulnerable to SQL Injection in adminpay.php.

Seacms <=13.3 is vulnerable to SQL Injection in admintypenews.php.

Seacms <=13.3 is vulnerable to SQL Injection in adminmembers.php.

Seacms <=13.3 is vulnerable to SQL Injection in admincollectnews.php.

Seacms <=13.3 is vulnerable to SQL Injection in adminpaylog.php.

Seacms <=13.3 is vulnerable to SQL Injection in admincollect.php that allows an authenticated attacker to exploit the database.

Seacms <=13.3 is vulnerable to SQL Injection in adminzyk.php.

Seacms <=13.3 is vulnerable to SQL Injection in adminreslib.php.