An issue was discovered in SeaCMS <=12.9 which allows remote attackers to execute arbitrary code via admin_ping.php.
CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')