HongCMS Access Control Error Vulnerability

HongCMS is an open source lightweight content management system (CMS). An access control error vulnerability exists in HongCMS, which stems from the product’s failure to add valid permission controls to the /admin/index.php/template/edit page. An attacker could cause arbitrary file reads and writes through this vulnerability.