SQL injection vulnerability in SeaCMS version 12.9, allows remote unauthenticated attackers to execute arbitrary code and obtain sensitive information via the id parameter in class.php.
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')