Lucene search
China National Vulnerability DatabaseCNVD-2023-54439HistoryJun 28, 2023 - 12:00 a.m.
HongCMS Cross-Site Request Forgery Vulnerability (CNVD-2023-54439)
2023-06-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
10
hongcms
csrf
vulnerability
privilege elevation
updateusers parameter
open source
content management system
0.002 Low
EPSS
Percentile
64.9%
HongCMS is an open source lightweight content management system (CMS). A cross-site request forgery (CSRF) vulnerability exists in HongCMS version 3.0.0. An attacker can exploit this vulnerability to execute arbitrary code and elevate privileges via the updateusers parameter.
| CPE | Name | Operator | Version |
|---|---|---|---|
| hongcms hongcms | eq | 3.0.0 |
Related
cve
cve
CVE-2020-21252
2023-06-20 15:15:11
prion
prion
Cross site request forgery (csrf)
2023-06-20 15:15:00
nvd
nvd
CVE-2020-21252
2023-06-20 15:15:11
cvelist
cvelist
CVE-2020-21252
2023-06-20 00:00:00