CVE-2017-17561 SeaCMS 6.56 allows remote authenticated administrators to execute arbitrary PHP code via a crafted token field to admin/admin_ping.php, which interacts with data/admin/ping.php.
HighCVSS 7.2
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SeaCMS 6.56 allows remote authenticated administrators to execute arbitrary PHP code via a crafted token field to admin/admin_ping.php, which interacts with data/admin/ping.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| seacms project seacms | = 6.56 | No fix listed |
References
- www.jianshu.com exploit issue-tracking third-party-advisory
- gist.github.com exploit issue-tracking third-party-advisory