CVE-2025-25761

HkCms v2.3.2.240702 was discovered to contain an arbitrary file write vulnerability in the component Appcenter.php...

HkCms 安全漏洞

HkCms is a free and open source content management system from HkCms Open Source. A security vulnerability exists in HkCms version v2.3.2.240702, which originates from an arbitrary file write in the Appcenter.php component...

CVE-2025-25761: External Control of File Name or Path

HkCms v2.3.2.240702 was discovered to contain an arbitrary file write vulnerability in the component Appcenter.php...

PT-2025-8946 · Hkcms · Hkcms

Name of the Vulnerable Software and Affected Versions: HkCms version 2.3.2.240702 Description: The issue is related to an arbitrary file write vulnerability in the Appcenter.php component. This vulnerability allows for the writing of files to arbitrary locations, potentially leading to security...

CVE-2025-25761

HkCms version v2.3.2.240702 is vulnerable to an arbitrary file write vulnerability within the Appcenter.php component. This flaw allows an attacker to write files to arbitrary locations, which could lead to significant security compromises. To mitigate this risk, it is recommended to disable the ...

HkCms File Upload Vulnerability in Guangzhou Hengqi Education Technology Co.

HkCms is a free open-source content management system of Guangzhou Hengqi Education Technology Co. Ltd. HkCms file upload vulnerability, the vulnerability stems from a file upload vulnerability in the getFileName method in /app/common/library/Upload.php. The vulnerability can be exploited by an...

CVE-2024-52677

HkCms = v2.3.2.240702 is vulnerable to file upload in the getFileName method in /app/common/library/Upload.php...

CVE-2024-52677

HkCms = v2.3.2.240702 is vulnerable to file upload in the getFileName method in /app/common/library/Upload.php...

HkCms 代码问题漏洞

HkCms is a free open-source content management system of Guangzhou Hengqi Education Technology Co. Ltd. HkCms file upload vulnerability, the vulnerability stems from a file upload vulnerability in the getFileName method in /app/common/library/Upload.php. The vulnerability can be exploited by an...

CVE-2024-52677

CVE-2024-52677 - HkCms : Multiple sources confirm a file upload vulnerability in the getFileName method of /app/common/library/Upload.php, affecting HkCms versions prior to or equal to 2.3.2.240702. The issue enables uploading of arbitrary files due to insufficient validation in the file handling...

CVE-2024-52677

HkCms = v2.3.2.240702 is vulnerable to file upload in the getFileName method in /app/common/library/Upload.php...

CVE-2024-52677

HkCms = v2.3.2.240702 is vulnerable to file upload in the getFileName method in /app/common/library/Upload.php...

CVE-2024-52677: Unrestricted Upload of File with Dangerous Type

HkCms = v2.3.2.240702 is vulnerable to file upload in the getFileName method in /app/common/library/Upload.php...

CVE-2023-40786

HKcms v2.3.0.230709 is vulnerable to Cross Site Scripting XSS allowing administrator cookies to be stolen...

CVE-2023-40786

HKcms v2.3.0.230709 is vulnerable to Cross Site Scripting XSS allowing administrator cookies to be stolen...

CVE-2023-40786

HKcms v2.3.0.230709 is vulnerable to Cross Site Scripting XSS allowing administrator cookies to be stolen...

Cross site scripting

HKcms v2.3.0.230709 is vulnerable to Cross Site Scripting XSS allowing administrator cookies to be stolen...

CVE-2023-40786: Improper Neutralization of Input During Web Page Generation

HKcms v2.3.0.230709 is vulnerable to Cross Site Scripting XSS allowing administrator cookies to be stolen...

CVE-2023-40786

HKcms v2.3.0.230709 is vulnerable to Cross Site Scripting XSS allowing administrator cookies to be stolen...

CVE-2023-40786

CVE-2023-40786 affects HKcms v2.3.0.230709. The issue is a Cross Site Scripting (XSS) vulnerability that can enable theft of administrator cookies. The connected sources consistently identify HKcms 2.3.0.230709 as vulnerable with XSS, but none of the provided documents specify a patched version o...