CVE-2024-40518
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-40518
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
SeaCMS 12.9 has a remote code execution vulnerability. The vulnerability is caused by admin_weixin.php directly splicing and writing the user input data into weixin.php without processing it, which allows authenticated attackers to exploit the vulnerability to execute arbitrary commands and obtain system permissions.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
SeaCMS 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
SeaCMS是海洋CMS（SeaCMS）公司的一套使用PHP编写的免费、开源的网站内容管理系统。该系统主要被设计用来管理视频点播资源。 SeaCMS 12.9版本存在安全漏洞，该漏洞源于admin_weixin. php直接将用户输入的数据拼接并写入wesin.php而不进行处理，经过身份验证的攻击者利用该漏洞可以执行任意命令并获得系统权限。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2024-40518
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-40518
请登录查看更多情报信息。
Same Patch Batch · n/a · 2024-07-12 · 23 CVEs total
| CVE-2024-40540 | my-springsecurity-plus SQL注入漏洞 | |
| CVE-2024-40110 | Poultry Farm Management System 安全漏洞 | |
| CVE-2024-31947 | StoneFly Storage Concentrator 安全漏洞 | |
| CVE-2024-30213 | StoneFly Storage Concentrator 安全漏洞 | |
| CVE-2024-40544 | PublicCMS 代码问题漏洞 | |
| CVE-2024-40548 | PublicCMS 代码问题漏洞 | |
| CVE-2024-40541 | my-springsecurity-plus SQL注入漏洞 | |
| CVE-2024-40547 | PublicCMS 安全漏洞 | |
| CVE-2024-40520 | SeaCMS 安全漏洞 | |
| CVE-2024-40551 | PublicCMS 代码问题漏洞 | |
| CVE-2024-40542 | my-springsecurity-plus SQL注入漏洞 | |
| CVE-2024-39340 | Securepoint Unified Threat Management 安全漏洞 | |
| CVE-2024-40543 | PublicCMS 代码问题漏洞 | |
| CVE-2024-40549 | PublicCMS 代码问题漏洞 | |
| CVE-2024-40521 | SeaCMS 安全漏洞 | |
| CVE-2024-40546 | PublicCMS 代码问题漏洞 | |
| CVE-2024-40539 | my-springsecurity-plus SQL注入漏洞 | |
| CVE-2024-40552 | PublicCMS 安全漏洞 | |
| CVE-2024-40550 | PublicCMS 代码问题漏洞 | |
| CVE-2024-40545 | PublicCMS 代码问题漏洞 |
Showing top 20 of 23 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8747
Z-BlogPHP Commend Approval c_system_event.php CheckComment i - CVE-2026-8746
Open5GS NRF nghttp2-server.c discover_handler use after free - CVE-2026-8745
Open5GS AUSF nausf-handler.c ogs_timer_add denial of service - CVE-2026-8744
Open5GS NRF context.c ogs_sbi_nf_service_add denial of servi - CVE-2026-8743
Open5GS AMF/MME context.c ran_ue_find_by_amf_ue_ngap_id impr
V. Comments for CVE-2024-40518
No comments yet