CVE-2024-39027

PoC —

CVSS 3.1

7.5 high

EPSS

<1%p38

Published

Jul 5, 2024 (Jul 5, 2024)

Modified

Jun 17, 2026

Description

SeaCMS v12.9 has an unauthorized SQL injection vulnerability. The vulnerability is caused by the SQL injection through the cid parameter at /js/player/dmplayer/dmku/index.php?ac=edit, which can cause sensitive database information to be leaked.

Vendors: seacms
Products: seacms
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.