VYPR
← All advisories
High severity8.8NVD Advisory· Published Jul 12, 2024· Updated Jun 17, 2026

CVE-2024-40520

CVE-2024-40520

Description

SeaCMS 12.9 has a remote code execution vulnerability. The vulnerability is caused by admin_config_mark.php directly splicing and writing the user input data into inc_photowatermark_config.php without processing it, which allows authenticated attackers to exploit the vulnerability to execute arbitrary commands and obtain system permissions.

Affected products

3
  • Seacms/Seacms3 versions
    cpe:2.3:a:seacms:seacms:12.9:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:seacms:seacms:12.9:*:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: =12.9

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.