A vulnerability has been found in SeaCMS up to 13.3. The impacted element is an unknown function of the file /admin_members.php?ac=editsave. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This affects another injection point than CVE-2025-25513.
References
| Link | Resource |
|---|---|
| https://github.com/coolcj-stack/seacms-v13.3-sqli/blob/main/README.md | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.324783 | Permissions Required VDB Entry |
| https://vuldb.com/?id.324783 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.649866 | Third Party Advisory VDB Entry |
Configurations
History
19 Sep 2025, 20:30
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/coolcj-stack/seacms-v13.3-sqli/blob/main/README.md - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.324783 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.324783 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.649866 - Third Party Advisory, VDB Entry | |
| CPE | cpe:2.3:a:seacms:seacms:*:*:*:*:*:*:*:* | |
| First Time |
Seacms seacms
Seacms |
18 Sep 2025, 11:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-09-18 11:15
Updated : 2025-09-19 20:30
NVD link : CVE-2025-10662
Mitre link : CVE-2025-10662
CVE.ORG link : CVE-2025-10662
JSON object : View
Products Affected
seacms
- seacms