PT-2018-12560 · Seacms · Seacms

Published 2018-07-23 · Updated 2018-09-14 · CVE-2018-14517

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SeaCMS version 6.61

Description The issue concerns two XSS problems located in the admin config.php file, specifically through certain form fields.

Recommendations For SeaCMS version 6.61, update the admin config.php file to fix the XSS issues in the form fields.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2018-14517

Affected Products

Seacms

References · 3

• 🔥 https://github.com/SecWiki/CMS-Hunter/blob/master/seacms/seacms6.61/seacms661.md · Exploit
• https://osv.dev/vulnerability/CVE-2018-14517 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-14517 · Security Note