CNNVD-202506-3690 Information

CNNVD ID

CNNVD-202506-3690

CVE-2025-6864

  • CNNVD Published: 2025-06-29

Description (Chinese)

SeaCMS是海洋CMS(SeaCMS)公司的一套使用PHP编写的免费、开源的网站内容管理系统。该系统主要被设计用来管理视频点播资源。 SeaCMS 13.2及之前版本存在安全漏洞,该漏洞源于对文件/admin_type.php的错误操作导致跨站请求伪造。

Description (English)

SeaCMS is a free, open-source web content management system developed by SeaCMS using PHP. The system is primarily designed to manage video on-demand resources. The SeaCMS 13.2 and previous versions had a security loophole, which arose out of a mishandling of the document/admin type.php, resulting in a cross-site request for forgery.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

海洋CMS

Published

2025-06-29

Last Modified

2026-02-24

References

https://vuldb.com/?submit.603562 https://vuldb.com/?ctiid.314336 https://vuldb.com/?id.314336 https://github.com/murongchengshu/zhicheng_tan/blob/main/SeaCMS_1.md https://access.redhat.com/security/cve/cve-2025-6864

Share on: