CVE-2018-16343

Name of the Vulnerable Software and Affected Versions SeaCMS version 6.61

Description The issue allows remote attackers to execute arbitrary code. This is due to the parseIf() function in include/main.class.php not blocking the use of $GLOBALS.

Recommendations For SeaCMS version 6.61, consider modifying the parseIf() function in include/main.class.php to block the use of $GLOBALS as a temporary workaround until a patch is available. Restrict access to the parseIf() function to minimize the risk of exploitation.