SeaCMS SQL Injection Vulnerability in admin_manager.php Component

Vulnerability

A SQL injection vulnerability has been identified in SeaCMS version 13.3, specifically within the admin_manager.php component. This vulnerability allows attackers to manipulate SQL queries, potentially leading to unauthorized data access or modification.

Impact

Exploitation of this vulnerability allows for SQL injection, which could be used to access, modify, or delete database information. In some cases, this type of vulnerability can be leveraged to execute administrative operations on the database or, in certain configurations, to execute arbitrary code.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
1.0
impact
3.1
exploitability
9.7
remediation
0.0
relevance
0.0
threat
6.4
urgency
2.9
incentive
10.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.