CVE Catalog
CVE-2025-25800
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk0.45%
36th percentile - higher than 36% of all known CVEs
Summary
SeaCMS 13.3 was discovered to contain an arbitrary file read vulnerability in the file_get_contents function at admin_safe_file.php.
Risk Assessment
An attacker can read sensitive system files, such as database configurations or passwords, leading to data leakage and security compromise.
Recommendation
Immediately update SeaCMS to the latest version and restrict access to admin_safe_file.php to trusted administrators only.
Original NVD description (English source)
SeaCMS 13.3 was discovered to contain an arbitrary file read vulnerability in the file_get_contents function at admin_safe_file.php.