cvedb.io
CVE-2024-46640
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2024-09-20T21:15:12.700 · Last modified 2026-06-17T07:55:39.037

Summary

SeaCMS 13.2 has a remote code execution vulnerability located in the file sql.class.chp. Although the system has a check function, the check function is not executed during execution, allowing remote code execution by writing to the file through the MySQL slow query method.

Affected products

seacms — seacms

Does this affect you?

Add your gear to cvedb and we'll alert you only when seacms ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.