CVE-2024-44916

Severity: high (CVSS 7.2 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2024-08-30 · updated 2026-07-05
Weakness: CWE-77

Description

Vulnerability in admin_ip.php in Seacms v13.1, when action=set, allows attackers to control IP parameters that are written to the data/admin/ip.php file and could result in arbitrary command execution.

Affected products

SeaCMS: 13.1

References

https://github.com/nn0nkey/nn0nkey/blob/main/CVE-2024-44916.md
https://github.com/seacms-net

Get alerted when CVE-2024-44916 or the next vulnerability affects your stack