CVE Catalog
CVE-2025-25799
MediumCVSS 6.0Exploitation Probability (EPSS)
Low risk0.23%
13th percentile - higher than 13% of all known CVEs
Summary
SeaCMS 13.3 was discovered to contain an arbitrary file read vulnerability in the file_get_contents function at admin_safe.php.
Risk Assessment
An attacker can read sensitive system files, such as database configurations or passwords, leading to data leakage and security compromise.
Recommendation
Immediately update SeaCMS to the latest version and restrict access to admin_safe.php to trusted administrators only.
Original NVD description (English source)
SeaCMS 13.3 was discovered to contain an arbitrary file read vulnerability in the file_get_contents function at admin_safe.php.