58 matches found
CVE-2025-25761
HkCms v2.3.2.240702 was discovered to contain an arbitrary file write vulnerability in the component Appcenter.php...
CVE-2025-25761
HkCms v2.3.2.240702 was discovered to contain an arbitrary file write vulnerability in the component Appcenter.php...
HkCms 安全漏洞
HkCms is a free and open source content management system from HkCms Open Source. A security vulnerability exists in HkCms version v2.3.2.240702, which originates from an arbitrary file write in the Appcenter.php component...
PT-2025-8946 · Hkcms · Hkcms
Name of the Vulnerable Software and Affected Versions: HkCms version 2.3.2.240702 Description: The issue is related to an arbitrary file write vulnerability in the Appcenter.php component. This vulnerability allows for the writing of files to arbitrary locations, potentially leading to security...
CVE-2025-25761: External Control of File Name or Path
HkCms v2.3.2.240702 was discovered to contain an arbitrary file write vulnerability in the component Appcenter.php...
HkCms File Upload Vulnerability in Guangzhou Hengqi Education Technology Co.
HkCms is a free open-source content management system of Guangzhou Hengqi Education Technology Co. Ltd. HkCms file upload vulnerability, the vulnerability stems from a file upload vulnerability in the getFileName method in /app/common/library/Upload.php. The vulnerability can be exploited by an...
CVE-2024-52677
HkCms = v2.3.2.240702 is vulnerable to file upload in the getFileName method in /app/common/library/Upload.php...
CVE-2024-52677
HkCms = v2.3.2.240702 is vulnerable to file upload in the getFileName method in /app/common/library/Upload.php...
HkCms 代码问题漏洞
HkCms is a free open-source content management system of Guangzhou Hengqi Education Technology Co. Ltd. HkCms file upload vulnerability, the vulnerability stems from a file upload vulnerability in the getFileName method in /app/common/library/Upload.php. The vulnerability can be exploited by an...
CVE-2024-52677
HkCms = v2.3.2.240702 is vulnerable to file upload in the getFileName method in /app/common/library/Upload.php...
CVE-2024-52677
CVE-2024-52677 - HkCms : Multiple sources confirm a file upload vulnerability in the getFileName method of /app/common/library/Upload.php, affecting HkCms versions prior to or equal to 2.3.2.240702. The issue enables uploading of arbitrary files due to insufficient validation in the file handling...
CVE-2024-52677
HkCms = v2.3.2.240702 is vulnerable to file upload in the getFileName method in /app/common/library/Upload.php...
CVE-2024-52677: Unrestricted Upload of File with Dangerous Type
HkCms = v2.3.2.240702 is vulnerable to file upload in the getFileName method in /app/common/library/Upload.php...
CVE-2023-40786
HKcms v2.3.0.230709 is vulnerable to Cross Site Scripting XSS allowing administrator cookies to be stolen...
CVE-2023-40786
HKcms v2.3.0.230709 is vulnerable to Cross Site Scripting XSS allowing administrator cookies to be stolen...
CVE-2023-40786
HKcms v2.3.0.230709 is vulnerable to Cross Site Scripting XSS allowing administrator cookies to be stolen...
Cross site scripting
HKcms v2.3.0.230709 is vulnerable to Cross Site Scripting XSS allowing administrator cookies to be stolen...
CVE-2023-40786
HKcms v2.3.0.230709 is vulnerable to Cross Site Scripting XSS allowing administrator cookies to be stolen...
CVE-2023-40786
CVE-2023-40786 affects HKcms v2.3.0.230709. The issue is a Cross Site Scripting (XSS) vulnerability that can enable theft of administrator cookies. The connected sources consistently identify HKcms 2.3.0.230709 as vulnerable with XSS, but none of the provided documents specify a patched version o...