CVE-2023-46010
Critical · CVSS 9.8SeaCMS — Arbitrary Code Execution via PHP component (CWE-94 Code Injection)
- CVSS
- 9.8
- nvd
- EPSS
- —
- KEV
- No
- Class
- other
- NVD-CWE-noinfo, CWE-94
Description
An issue in SeaCMS v.12.9 allows an attacker to execute arbitrary commands via the admin_safe.php component.
Search profile — drives PoC discovery
Symbols admin_safe.phpSeaCMSseacms
Keywords CVE-2023-46010SeaCMS 12.9admin_safe.phparbitrary command executionSeaCMS RCESeaCMS code injection
Versions: 12.9
Ranked PoCs (1) — best first
Heuristic ranking — not yet expert-vetted. Scored on structure + provenance, not execution.
- ★ 0fkie-cad/nvd-json-data-feeds needs reviewtrickest
Recall-favoring discovery; ranking by the Stage-4 scorer (Adam's rubric). Scanner/aggregator repos are hidden.
References
Status: enriched · ingested 2026-07-05T06:00:39.000Z · profiled 2026-07-05T18:30:39.000Z