CVE-2024-46640

9.8 criticalEPSS 1.0%

Critical (9.8) in seacms seacms. EPSS 1.0% chance of exploitation in the next 30 days.

SeaCMS 13.2 has a remote code execution vulnerability located in the file sql.class.chp. Although the system has a check function, the check function is not executed during execution, allowing remote code execution by writing to the file through the MySQL slow query method.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2024-09-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

seacms:seacms

References

https://gitee.com/zheng_botong/CVE-2024-46640

Check your stack JSON