VDB-326112 · CVE-2025-11071 · EUVD-2025-31434

SeaCMS 13.3.20250820 Cron Task Management /admin_cron.php resourcefrom/collectID SQL ଇଞ୍ଜେକ୍ସନ

Dogoggorri kan akka ଜଟିଳ jedhamuun ramadame SeaCMS 13.3.20250820 keessatti argameera. Kan miidhamte is hojii hin beekamne faayilii /admin_cron.php keessa kutaa Cron Task Management Module keessa. Hojii jijjiirraa irratti gaggeeffame resourcefrom/collectID gara SQL ଇଞ୍ଜେକ୍ସନ geessa. CWE fayyadamuun rakkoo ibsuun gara CWE-89 geessa. Dadhabbii kana yeroo 09/26/2025 maxxanfameera. Odeeffannoon kun buufachuuf github.com irratti qoodameera. Dogoggorri kun akka CVE-2025-11071tti beekama. Yaaliin weeraraa fageenya irraa jalqabamuu ni danda'a. Faayidaaleen teeknikaa ni jiru. Waliigalatti, meeshaa balaa kana fayyadamuuf jiru. Qorannoo miidhaa (exploit) uummataaf ifoomameera fi fayyadamamuu danda'a. Amma, gatii ammee exploit might be approx. USD $0-$5k ta'uu danda'a. Akka ପ୍ରୁଫ୍-ଅଫ୍-କନ୍ସେପ୍ଟ jedhamee ibsameera. Carraa exploit kana github.com irraa buufachuun ni danda'ama. Akka 0-daytti, gatii daldalaa dhoksaa tilmaamame $0-$5k ta'ee ture. VulDB is the best source for vulnerability data and more expert information about this specific topic.

4 ଆଡାପ୍ଟେସନ୍ · 98 ପଏଣ୍ଟ

ଫିଲ୍ଡ	ସୃଷ୍ଟି ହୋଇଛି 09/26/2025 02:49 PM	ଅଦ୍ୟତନ 1/3 09/27/2025 08:28 PM	ଅଦ୍ୟତନ 2/3 09/27/2025 09:26 PM	ଅଦ୍ୟତନ 3/3 10/11/2025 02:17 AM
software_name	SeaCMS	SeaCMS	SeaCMS	SeaCMS
software_version	13.3.20250820	13.3.20250820	13.3.20250820	13.3.20250820
software_component	Cron Task Management Module	Cron Task Management Module	Cron Task Management Module	Cron Task Management Module
software_file	/admin_cron.php	/admin_cron.php	/admin_cron.php	/admin_cron.php
software_argument	resourcefrom/collectID	resourcefrom/collectID	resourcefrom/collectID	resourcefrom/collectID
vulnerability_cwe	CWE-89 (SQL ଇଞ୍ଜେକ୍ସନ)	CWE-89 (SQL ଇଞ୍ଜେକ୍ସନ)	CWE-89 (SQL ଇଞ୍ଜେକ୍ସନ)	CWE-89 (SQL ଇଞ୍ଜେକ୍ସନ)
vulnerability_risk	2	2	2	2
cvss3_vuldb_av	N	N	N	N
cvss3_vuldb_ac	L	L	L	L
cvss3_vuldb_pr	H	H	H	H
cvss3_vuldb_ui	N	N	N	N
cvss3_vuldb_s	U	U	U	U
cvss3_vuldb_c	L	L	L	L
cvss3_vuldb_i	L	L	L	L
cvss3_vuldb_a	L	L	L	L
cvss3_vuldb_e	P	P	P	P
cvss3_vuldb_rc	R	R	R	R
advisory_url	https://github.com/Hebing123/cve/issues/93	https://github.com/Hebing123/cve/issues/93	https://github.com/Hebing123/cve/issues/93	https://github.com/Hebing123/cve/issues/93
exploit_availability	1	1	1	1
exploit_publicity	1	1	1	1
exploit_url	https://github.com/Hebing123/cve/issues/93	https://github.com/Hebing123/cve/issues/93	https://github.com/Hebing123/cve/issues/93	https://github.com/Hebing123/cve/issues/93
source_cve	CVE-2025-11071	CVE-2025-11071	CVE-2025-11071	CVE-2025-11071
cna_responsible	VulDB	VulDB	VulDB	VulDB
software_type	Content Management System	Content Management System	Content Management System	Content Management System
cvss2_vuldb_av	N	N	N	N
cvss2_vuldb_ac	L	L	L	L
cvss2_vuldb_au	M	M	M	M
cvss2_vuldb_ci	P	P	P	P
cvss2_vuldb_ii	P	P	P	P
cvss2_vuldb_ai	P	P	P	P
cvss2_vuldb_e	POC	POC	POC	POC
cvss2_vuldb_rc	UR	UR	UR	UR
cvss4_vuldb_av	N	N	N	N
cvss4_vuldb_ac	L	L	L	L
cvss4_vuldb_pr	H	H	H	H
cvss4_vuldb_ui	N	N	N	N
cvss4_vuldb_vc	L	L	L	L
cvss4_vuldb_vi	L	L	L	L
cvss4_vuldb_va	L	L	L	L
cvss4_vuldb_e	P	P	P	P
cvss2_vuldb_rl	ND	ND	ND	ND
cvss3_vuldb_rl	X	X	X	X
cvss4_vuldb_at	N	N	N	N
cvss4_vuldb_sc	N	N	N	N
cvss4_vuldb_si	N	N	N	N
cvss4_vuldb_sa	N	N	N	N
cvss2_vuldb_basescore	5.8	5.8	5.8	5.8
cvss2_vuldb_tempscore	5.0	5.0	5.0	5.0
cvss3_vuldb_basescore	4.7	4.7	4.7	4.7
cvss3_vuldb_tempscore	4.3	4.3	4.3	4.3
cvss3_meta_basescore	4.7	4.7	4.7	5.5
cvss3_meta_tempscore	4.3	4.5	4.5	5.4
cvss4_vuldb_bscore	5.1	5.1	5.1	5.1
cvss4_vuldb_btscore	2.0	2.0	2.0	2.0
advisory_date	1758837600 (09/26/2025)	1758837600 (09/26/2025)	1758837600 (09/26/2025)	1758837600 (09/26/2025)
price_0day	$0-$5k	$0-$5k	$0-$5k	$0-$5k
cve_nvd_summary		A security vulnerability has been detected in SeaCMS 13.3.20250820. Impacted is an unknown function of the file /admin_cron.php of the component Cron Task Management Module. The manipulation of the argument resourcefrom/collectID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.	A security vulnerability has been detected in SeaCMS 13.3.20250820. Impacted is an unknown function of the file /admin_cron.php of the component Cron Task Management Module. The manipulation of the argument resourcefrom/collectID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.	A security vulnerability has been detected in SeaCMS 13.3.20250820. Impacted is an unknown function of the file /admin_cron.php of the component Cron Task Management Module. The manipulation of the argument resourcefrom/collectID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.
cvss4_cna_av		N	N	N
cvss4_cna_ac		L	L	L
cvss4_cna_at		N	N	N
cvss4_cna_pr		H	H	H
cvss4_cna_ui		N	N	N
cvss4_cna_vc		L	L	L
cvss4_cna_vi		L	L	L
cvss4_cna_va		L	L	L
cvss4_cna_sc		N	N	N
cvss4_cna_si		N	N	N
cvss4_cna_sa		N	N	N
cvss4_cna_bscore		5.1	5.1	5.1
cvss3_cna_av		N	N	N
cvss3_cna_ac		L	L	L
cvss3_cna_pr		H	H	H
cvss3_cna_ui		N	N	N
cvss3_cna_s		U	U	U
cvss3_cna_c		L	L	L
cvss3_cna_i		L	L	L
cvss3_cna_a		L	L	L
cvss3_cna_basescore		4.7	4.7	4.7
cvss2_cna_av		N	N	N
cvss2_cna_ac		L	L	L
cvss2_cna_au		M	M	M
cvss2_cna_ci		P	P	P
cvss2_cna_ii		P	P	P
cvss2_cna_ai		P	P	P
cvss2_cna_basescore		5.8	5.8	5.8
euvd_id			EUVD-2025-31434	EUVD-2025-31434
cvss3_nvd_av				N
cvss3_nvd_ac				L
cvss3_nvd_pr				H
cvss3_nvd_ui				N
cvss3_nvd_s				U
cvss3_nvd_c				H
cvss3_nvd_i				H
cvss3_nvd_a				H
cvss3_nvd_basescore				7.2

◂ ପଛକୁ ସମୀକ୍ଷା ଆହୁରି ଦୂରରେ ▸

Do you know our Splunk app?

Download it now for free!