Orta CVSS 4.9 PoC var
CVE-2025-60449: Seacms: hassas bilgi ifşası
Açıklama (NVD)
An information disclosure vulnerability has been discovered in SeaCMS 13.1. The vulnerability exists in the admin_safe.php component located in the /btcoan/ directory. This security flaw allows authenticated administrators to scan and download not only the application’s source code but also potentially any file accessible on the server’s root directory.
Özet bilgiler
- Ürün
- Seacms Seacms
- CVSS v3.1
- 4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N - EPSS
- %0,37 (yüzdelik 31)
- CWE
- CWE-200
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| seacms-seacms | 13.1 | 13.1 | — |