Beveiligingsadvies

CVE-2024-40518

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-07-12 00:00:00
Laatst bijgewerkt 2024-08-02 04:33:11
Toegewezen door mitre
CVSS-score 7.2
Status PUBLISHED

Beschrijving

SeaCMS 12.9 has a remote code execution vulnerability. The vulnerability is caused by admin_weixin.php directly splicing and writing the user input data into weixin.php without processing it, which allows authenticated attackers to exploit the vulnerability to execute arbitrary commands and obtain system permissions.