← Back to browse · API

CVE-2024-29275

Severity
CRITICAL
CVSS
9.8
EPSS
0.04998
Risk score
40.95
CISA KEV
No
PoC
No
Published
2024-03-22
Modified
2024-08-02
First seen
2026-08-08
Aliases
EUVD-2024-26287, GHSA-HVMG-PGCH-CW7V
Products
n/a:n/a n/a
Sources
euvd EUVD-2024-26287

Description

SQL injection vulnerability in SeaCMS version 12.9, allows remote unauthenticated attackers to execute arbitrary code and obtain sensitive information via the id parameter in class.php.

References