CVE-2025-15003

EUVD-2025-204677
A vulnerability was found in SeaCMS up to 13.3. The impacted element is an unknown function of the file admin_video.php. Performing manipulation of the argument e_id results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used.
Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.7 MEDIUM
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
VulDBCNA
4.7 MEDIUM
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
Base Score
CVSS 3.x
EPSS Score
Percentile: 9%
Affected Products (NVD)
VendorProductVersion
seacmsseacms
13.0 ≤
𝑥
≤ 13.3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://note-hxlab.wetolink.com/share/aTI1wPFLm7FG
https://vuldb.com/?ctiid.337708
https://vuldb.com/?id.337708
https://vuldb.com/?submit.716084