CVE-2025-15002
A vulnerability has been found in SeaCMS up to 13.3.
Published Dec 21, 2025 · updated Oct 14, 2026 · seacms seacms
A vulnerability has been found in SeaCMS up to 13.3. The affected element is an unknown function of the file js/player/dmplayer/dmku/class/mysqli.class.php. Such manipulation of the argument page/limit leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.
Timeline
Detection, updates, and resolution for this record.
Dec 21, 2025 · NIST NVD
Detected
A vulnerability has been found in SeaCMS up to 13.3. The affected element is an unknown function of the file js/player/dmplayer/dmku/class/mysqli.class.php. Such manipulation of the argument page/limit leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.
Oct 14, 2026 · NIST NVD
Updated
A vulnerability has been found in SeaCMS up to 13.3. The affected element is an unknown function of the file js/player/dmplayer/dmku/class/mysqli.class.php. Such manipulation of the argument page/limit leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.
Affected
- cpe seacms/seacmsversion unspecified
Sources
- CVE.orgCVE-2025-15002
Official CVE identifier
cve.org - FIRST EPSSCVE-2025-15002
30-day exploitation probability 0.5%
first.org - NIST NVDCVE-2025-15002
A vulnerability has been found in SeaCMS up to 13.3. The affected element is an unknown function of the file js/player/dmplayer/dmku/class/mysqli.class.php. Such manipulation of the argument page/limit leads to sql injection. The attack can be executed remotely. The exploit has b
nvd.nist.gov