Remote Code Execution Vulnerability in SeaCMS by SeaCMS
CVE-2025-25802

5.1MEDIUM

Key Information:

Vendor
SeaCMS
Status
SeaCMS
Vendor
CVE Published:
26 February 2025

Summary

A vulnerability has been identified in SeaCMS version 13.3, where a flaw in the admin_ip.php component allows for remote code execution. This can potentially enable unauthorized users to execute arbitrary commands on the server, posing significant risks to the integrity and confidentiality of the system. It is crucial for users of this version to apply available patches and security measures to mitigate potential exploitation.

References

http://seacms.com
https://www.seacms.com/
https://github.com/Ka7arotto/Seacms/blob/main/Seacms13.3-...

CVSS V3.1

Score:
5.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.