CVE-2024-7161

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

A vulnerability classified as problematic was found in SeaCMS 13.0. Affected by this vulnerability is an unknown functionality of the file /member.php?action=chgpwdsubmit of the component Password Change Handler. The manipulation of the argument newpwd/newpwd2 leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272575.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-352

Affected software

Vendor	Product	Versions
n/a	SeaCMS	13.0
seacms	seacms	13.0

References

https://github.com/HuaQiPro/seacms/issues/30Exploit, Third Party Advisory
https://vuldb.com/?ctiid.272575Permissions Required
https://vuldb.com/?id.272575Third Party Advisory
https://vuldb.com/?submit.379473Third Party Advisory
https://github.com/HuaQiPro/seacms/issues/30Exploit, Third Party Advisory
https://vuldb.com/?ctiid.272575Permissions Required
https://vuldb.com/?id.272575Third Party Advisory
https://vuldb.com/?submit.379473Third Party Advisory

Timeline

Published: Jul 28, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-71625.4A vulnerability, which was classified as problematic, has been found in SeaCMS 12.9/13.0. Affected by this issue is some unknown functionali CVE-2024-71636.1A vulnerability, which was classified as problematic, was found in SeaCMS 12.9. This affects an unknown part of the file /js/player/dmplayer CVE-2024-71649.8A vulnerability has been found in SourceCodester School Fees Payment System 1.0 and classified as critical. This vulnerability affects unkno CVE-2024-71658.8A vulnerability was found in SourceCodester School Fees Payment System 1.0 and classified as critical. This issue affects some unknown proce CVE-2024-71668.8A vulnerability was found in SourceCodester School Fees Payment System 1.0. It has been classified as critical. Affected is an unknown funct CVE-2024-71678.8A vulnerability was found in SourceCodester School Fees Payment System 1.0. It has been declared as critical. Affected by this vulnerability CVE-2024-71688.8A vulnerability was found in SourceCodester School Fees Payment System 1.0. It has been rated as critical. Affected by this issue is some un CVE-2024-71698.8A vulnerability classified as problematic has been found in SourceCodester School Fees Payment System 1.0. This affects an unknown part of t CVE-2024-71708.8A vulnerability was found in TOTOLINK A3000RU 5.9c.5185. It has been rated as problematic. This issue affects some unknown processing of the CVE-2024-71718.8A vulnerability classified as critical has been found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. Affected is the function NTPSyncWithHost of CVE-2024-71728.8A vulnerability classified as critical was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. Affected by this vulnerability is the function g CVE-2024-71738.8A vulnerability, which was classified as critical, has been found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. Affected by this issue is the f