CVE-2025-25761

CVE-2025-25761 affects HkCms v2.3.2.240702 with an arbitrary file write vulnerability in Appcenter.php. Public sources (NVD/Red Hat, CNNVD, PT-Security, CVE listing) confirm impact as high (C:H, I:H, A:H) with network exposure; exploit details are not provided in the documents. A remediation ment...

CVE-2025-25761

HkCms v2.3.2.240702 was discovered to contain an arbitrary file write vulnerability in the component Appcenter.php...

PT-2025-8946 · Hkcms · Hkcms

Name of the Vulnerable Software and Affected Versions: HkCms version 2.3.2.240702 Description: The issue is related to an arbitrary file write vulnerability in the Appcenter.php component. This vulnerability allows for the writing of files to arbitrary locations, potentially leading to security...

HkCms File Upload Vulnerability in Guangzhou Hengqi Education Technology Co.

HkCms is a free open-source content management system of Guangzhou Hengqi Education Technology Co. Ltd. HkCms file upload vulnerability, the vulnerability stems from a file upload vulnerability in the getFileName method in /app/common/library/Upload.php. The vulnerability can be exploited by an...

CVE-2024-52677

HkCms = v2.3.2.240702 is vulnerable to file upload in the getFileName method in /app/common/library/Upload.php...

CVE-2024-52677

HkCms = v2.3.2.240702 is vulnerable to file upload in the getFileName method in /app/common/library/Upload.php...

CVE-2024-52677

HkCms = v2.3.2.240702 is vulnerable to file upload in the getFileName method in /app/common/library/Upload.php...

CVE-2024-52677

HkCms = v2.3.2.240702 is vulnerable to file upload in the getFileName method in /app/common/library/Upload.php...

HkCms 代码问题漏洞

HkCms is a free open-source content management system of Guangzhou Hengqi Education Technology Co. Ltd. HkCms file upload vulnerability, the vulnerability stems from a file upload vulnerability in the getFileName method in /app/common/library/Upload.php. The vulnerability can be exploited by an...

CVE-2024-52677

CVE-2024-52677 - HkCms : Multiple sources confirm a file upload vulnerability in the getFileName method of /app/common/library/Upload.php, affecting HkCms versions prior to or equal to 2.3.2.240702. The issue enables uploading of arbitrary files due to insufficient validation in the file handling...

CVE-2023-40786

HKcms v2.3.0.230709 is vulnerable to Cross Site Scripting XSS allowing administrator cookies to be stolen...

CVE-2023-40786

HKcms v2.3.0.230709 is vulnerable to Cross Site Scripting XSS allowing administrator cookies to be stolen...

CVE-2023-40786

HKcms v2.3.0.230709 is vulnerable to Cross Site Scripting XSS allowing administrator cookies to be stolen...

Cross site scripting

HKcms v2.3.0.230709 is vulnerable to Cross Site Scripting XSS allowing administrator cookies to be stolen...

CVE-2023-40786

HKcms v2.3.0.230709 is vulnerable to Cross Site Scripting XSS allowing administrator cookies to be stolen...

PT-2023-27637 · Hkcms · Hkcms

Name of the Vulnerable Software and Affected Versions: HKcms version 2.3.0.230709 Description: The issue allows for Cross Site Scripting XSS, enabling the theft of administrator cookies. Recommendations: For HKcms version 2.3.0.230709, at the moment, there is no information about a newer version...

CVE-2023-40786

CVE-2023-40786 affects HKcms v2.3.0.230709. The issue is a Cross Site Scripting (XSS) vulnerability that can enable theft of administrator cookies. The connected sources consistently identify HKcms 2.3.0.230709 as vulnerable with XSS, but none of the provided documents specify a patched version o...

CVE-2023-40786

HKcms v2.3.0.230709 is vulnerable to Cross Site Scripting XSS allowing administrator cookies to be stolen...

CVE-2023-1482

A vulnerability, which was classified as problematic, was found in HkCms 2.2.4.230206. This affects an unknown part of the file /admin.php/appcenter/local.html?type=addon of the component External Plugin Handler. The manipulation leads to code injection. It is possible to initiate the attack...

CVE-2023-1482

A vulnerability, which was classified as problematic, was found in HkCms 2.2.4.230206. This affects an unknown part of the file /admin.php/appcenter/local.html?type=addon of the component External Plugin Handler. The manipulation leads to code injection. It is possible to initiate the attack...