CVE-2024-44916

Name of the Vulnerable Software and Affected Versions Seacms version 13.1

Description The issue allows attackers to control IP parameters written to the data/admin/ip.php file when the action is set, potentially resulting in arbitrary command execution. This occurs due to a vulnerability in the admin ip.php file in Seacms version 13.1.

Recommendations For Seacms version 13.1, consider disabling the admin ip.php file or restricting access to it until a patch is available to prevent attackers from controlling IP parameters and potentially executing arbitrary commands.