CVE-2025-11071

HighCVSS 7.2/10Last modified Oct 19, 2026

Description

A security vulnerability has been detected in SeaCMS 13.3.20250820. Impacted is an unknown function of the file /admin_cron.php of the component Cron Task Management Module. The manipulation of the argument resourcefrom/collectID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74 CWE-89

Affected software

Vendor	Product	Versions
n/a	SeaCMS	13.3.20250820

References

https://github.com/Hebing123/cve/issues/93Exploit, Issue Tracking
https://vuldb.com/?ctiid.326112Permissions Required, VDB Entry
https://vuldb.com/?id.326112Third Party Advisory, VDB Entry
https://vuldb.com/?submit.659883Third Party Advisory, VDB Entry

Timeline

Published: Sep 27, 2025
Last modified: Oct 19, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-110725.3The MelAbu WP Download Counter Button WordPress plugin through 1.8.6.7 does not validate the path of files to be downloaded, which could all CVE-2025-110734.7A vulnerability was detected in Keyfactor RG-EW5100BE EW_3.0B11P280_EW5100BE-PRO_12183019. The affected element is an unknown function of th CVE-2025-110749.8A flaw has been found in code-projects Project Monitoring System 1.0. The impacted element is an unknown function of the file /login.php. Th CVE-2025-110759.8A vulnerability has been found in Campcodes Online Learning Management System 1.0. This affects an unknown function of the file /admin/de_ac CVE-2025-110769.8A vulnerability was found in Campcodes Online Learning Management System 1.0. This impacts an unknown function of the file /admin/edit_teach CVE-2025-110779.8A vulnerability was determined in Campcodes Online Learning Management System 1.0. Affected is an unknown function of the file /admin/add_co CVE-2025-110788.8A vulnerability was identified in itsourcecode Open Source Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the CVE-2025-110799.8A security flaw has been discovered in Campcodes Farm Management System 1.0. Affected by this issue is some unknown functionality. The manip CVE-2025-11088.6Insufficient data authenticity verification vulnerability in Janto, versions prior to r12. This allows an unauthenticated attacker to modify CVE-2025-110804.3A security vulnerability has been detected in zhuimengshaonian wisdom-education up to 1.0.4. This vulnerability affects the function selectS CVE-2025-110815.5A vulnerability was detected in GNU Binutils 2.45. This issue affects the function dump_dwarf_section of the file binutils/objdump.c. Perfor CVE-2025-110827.8A flaw has been found in GNU Binutils 2.45. Impacted is the function _bfd_elf_parse_eh_frame of the file bfd/elf-eh-frame.c of the component