PT-2018-12560 · Seacms · Seacms

Publicado 2018-07-23 · Atualizado 2018-09-14 · CVE-2018-14517

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SeaCMS version 6.61

Description The issue concerns two XSS problems located in the admin config.php file, specifically through certain form fields.

Recommendations For SeaCMS version 6.61, update the admin config.php file to fix the XSS issues in the form fields.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-14517

Produtos afetados

Seacms

Referências · 3

• 🔥 https://github.com/SecWiki/CMS-Hunter/blob/master/seacms/seacms6.61/seacms661.md · Exploit
• https://osv.dev/vulnerability/CVE-2018-14517 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-14517 · Nota de Segurança