Description
An information disclosure vulnerability has been discovered in SeaCMS 13.1. The vulnerability exists in the admin_safe.php component located in the /btcoan/ directory. This security flaw allows authenticated administrators to scan and download not only the application’s source code but also potentially any file accessible on the server’s root directory.
INFO
Published Date :
2025-10-03T00:00:00.000Z
Last Modified :
2025-10-03T14:39:22.652Z
Source :
mitre
AFFECTED PRODUCTS
The following products are affected by CVE-2025-60449 vulnerability.
| Vendors | Products |
|---|---|
| Seacms |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2025-60449.
CVSS Vulnerability Scoring System
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact