SeaCMS Cross-Site Request Forgery Vulnerability in admin_type.php

A cross-site request forgery (CSRF) vulnerability has been identified in SeaCMS versions prior to 13.2. The issue resides in the file admin_type.php, where an unknown functionality can be manipulated to perform unauthorized actions. This vulnerability can be exploited remotely and requires user interaction from the victim.

Impact

Exploitation of this vulnerability allows for cross-site request forgery, where an attacker can trick a user into performing actions they did not intend to.

Reproduction

To reproduce this vulnerability, locate a SeaCMS installation that is running a version prior to 13.2. The vulnerability can be found by searching for 'admin_type.php' using Google Hacking techniques. Once a vulnerable target is identified, an exploit can be executed that takes advantage of the CSRF flaw.