Arbitrary Code Execution Vulnerability in SeaCMS by SeaCMS Team
CVE-2023-44847

7.2HIGH

Key Information:

Vendor
Seacms
Status
Seacms
Vendor
CVE Published:
10 October 2023

Summary

An arbitrary code execution vulnerability exists in SeaCMS v.12.8, specifically within the admin_ Weixin.php component. This flaw can allow an attacker to execute malicious code, potentially compromising the safety and integrity of the affected system. It is essential for users of this version to assess their systems and apply appropriate security measures to mitigate the risks associated with this vulnerability.

References

https://blog.csdn.net/2301_79997870/article/details/13366...

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2023-44847 : Arbitrary Code Execution Vulnerability in SeaCMS by SeaCMS Team | SecurityVulnerability.io