CVE-2024-41444

CRITICAL

SeaCMS v12.9 - SQL Injection via DM Player Key Parameter

Title source: llm

SeaCMS v12.9 has a SQL injection vulnerability in the key parameter of /js/player/dmplayer/dmku/index.php?ac=so.

Core 3

Core References

Third Party Advisory

Product

Issue Tracking

CVSS v3 9.8

EPSS 0.0049

EPSS Percentile 38.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vulnrichment

Exploitation none

Automatable yes

Technical Impact total

CWE

CWE-89

Status published

Products (1)

seacms/seacms 12.9

Published Aug 26, 2024

Tracked Since Feb 18, 2026