CyberRota Analysis
AI-GeneratedSeaCMS versions up to 13.6 are vulnerable to a remote code injection due to improper handling of the `searchtype` argument in the `parseIf` function of the `search.php` file. This high-severity vulnerability could allow an attacker to execute arbitrary code on the server, potentially leading to full system compromise. Organizations using affected versions of SeaCMS should prioritize patching this vulnerability to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was determined in SeaCMS up to 13.6. Affected is the function parseIf of the file search.php of the component Template Engine. This manipulation of the argument searchtype causes code injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.