cvedb.io
CVE-2024-42599
HIGH · CVSS 8.8
EPSS exploitation probability: 0%
Published 2024-08-22T20:15:09.730 · Last modified 2026-06-17T07:49:43.313

Summary

SeaCMS 13.0 has a remote code execution vulnerability. The reason for this vulnerability is that although admin_files.php imposes restrictions on edited files, attackers can still bypass these restrictions and write code, allowing authenticated attackers to exploit the vulnerability to execute arbitrary commands and gain system privileges.

Affected products

seacms — seacms

Does this affect you?

Add your gear to cvedb and we'll alert you only when seacms ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.