CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Rapid7 Vulnerability Database (full)•added 2021/05/18 12:00 a.m.•4 views

CVE-2020-18178: Improper Limitation of a Pathname to a Restricted Directory

Path Traversal in HongCMS v4.0.0 allows remote attackers to view, edit, and delete arbitrary files via a crafted POST request to the component "/hcms/admin/index.php/language/ajax."...

9.8CVSS5.9AI score0.01745EPSS

SaveExploits1References2

Prion•added 2018/09/10 4:29 a.m.•27 views

Arbitrary file deletion

HongCMS 3.0.0 allows arbitrary file deletion via a ../ in the file parameter to admin/index.php/language/ajax?action=delete...

6.4CVSS6.5AI score0.01619EPSS

SaveExploits1References1Affected Software1

Rapid7 Vulnerability Database (full)•added 2018/09/10 12:00 a.m.•6 views

CVE-2018-16774: Improper Limitation of a Pathname to a Restricted Directory

HongCMS 3.0.0 allows arbitrary file deletion via a ../ in the file parameter to admin/index.php/language/ajax?action=delete...

7.5CVSS7AI score0.01619EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by