CVE-2023-2926

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2023-2926

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-2926.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2023-2926

Published

2023-05-27T09:00:03.321Z

Modified

2026-07-15T01:49:07.199561377Z

Severity

5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L CVSS Calculator

Summary

SeaCMS Picture Upload member.php denial of service

Details

A vulnerability was found in SeaCMS 11.6 and classified as problematic. This issue affects some unknown processing of the file member.php of the component Picture Upload Handler. The manipulation of the argument oldpic leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-230081 was assigned to this vulnerability.

Database specific

{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-404"
    ],
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "11.6"
                },
                {
                    "last_affected": "11.6"
                }
            ]
        }
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/2xxx/CVE-2023-2926.json"
}

References

Affected packages

Git / github.com/seacms-net/cms

Affected ranges

Type

GIT

Repo

https://github.com/seacms-net/cms

Events

Introduced

0ae47c8cc048c8c967084550f22e16fd1967eae2

Last affected

0ae47c8cc048c8c967084550f22e16fd1967eae2

Database specific

{
    "source": "CPE_STRING",
    "cpe": "cpe:2.3:a:seacms:seacms:11.6:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "11.6"
        },
        {
            "last_affected": "11.6"
        }
    ]
}

Affected versions

11.*

11.6

v11.*

v11.6

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-2926.json"