CVE-2022-43256

CRITICAL

SeaCms < 12.6 - SQL Injection via DM Player DMKU Index Component

Title source: llm
STIX 2.1

Description

SeaCms before v12.6 was discovered to contain a SQL injection vulnerability via the component /js/player/dmplayer/dmku/index.php.

References (1)

Core 1
Core References
Exploit, Third Party Advisory
https://github.com/seacms-com/seacms/issues/23

Scores

CVSS v3 9.8
EPSS 0.0085
EPSS Percentile 53.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact total

Details

CWE
CWE-89
Status published
Products (1)
seacms/seacms < 12.6
Published Nov 16, 2022
Tracked Since Feb 18, 2026