CVE-2024-39027

Published: 2024-07-05T14:15Z

Last Modified: 2025-03-20T19:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

SeaCMS v12.9 has an unauthorized SQL injection vulnerability. The vulnerability is caused by the SQL injection through the cid parameter at /js/player/dmplayer/dmku/index.php?ac=edit, which can cause sensitive database information to be leaked. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt