CVE-2025-29647

Summary

CVE-2025-29647 is a recently disclosed SQL injection vulnerability affecting SeaCMS version 13.3. An attacker can exploit this flaw by sending maliciously crafted input to the admin_tempvideo.php component, allowing unauthorized access to sensitive data or even complete system takeover. SQL injection attacks occur when an application does not properly validate or filter user input, leading to the execution of malicious SQL statements. The vulnerability poses a significant risk to organizations using the affected SeaCMS version and should be addressed promptly by installing the latest security updates.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.