CVE-2025-3797
CVSS 3.1 Score 4.7 of 10 (medium)
Details
Published Apr 19, 2025
Updated: Apr 21, 2025
CWE ID 74
CWE ID 89
Summary
CVE-2025-3797 is a critical vulnerability affecting SeaCMS versions up to 13.3. This issue lies in the unknown code of the /admin_topic.php?action=delall file, which can be exploited through the manipulation of the argument e_id. The vulnerability enables sql injection attacks, which can be initiated remotely. The exploit for this weakness has been made public, increasing the risk of potential attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- SeaCMS
Affected Vendors
- Seacms