221 matches found
CVE-2019-17610: Improper Neutralization of Input During Web Page Generation
HongCMS 3.0.0 has XSS via the install/index.php dbpassword parameter...
CVE-2019-17611: Improper Neutralization of Input During Web Page Generation
HongCMS 3.0.0 has XSS via the install/index.php tableprefix parameter...
CVE-2019-17609: Improper Neutralization of Input During Web Page Generation
HongCMS 3.0.0 has XSS via the install/index.php dbusername parameter...
File Upload Vulnerability in HongCMS
HongCMS is an open source lightweight content management system CMS. A file upload vulnerability exists in HongCMS. An attacker can exploit this vulnerability to gain server privileges...
Arbitrary File Read Vulnerability in HongCMS
HongCMS is an open source lightweight content management system CMS. An arbitrary file read vulnerability exists in HongCMS. An attacker can exploit this vulnerability to obtain sensitive information...
Code execution vulnerability in HongCMS (CNVD-2019-40721)
HongCMS is an open source lightweight content management system CMS. A code execution vulnerability exists in HongCMS. An attacker can exploit this vulnerability to gain server privileges...
Code execution vulnerability in HongCMS (CNVD-2019-40719)
HongCMS is an open source lightweight content management system CMS. A code execution vulnerability exists in HongCMS. An attacker can exploit this vulnerability to gain server privileges...
HongCMS suffers from an arbitrary file deletion vulnerability (CNVD-2019-40718)
HongCMS is an open source lightweight content management system CMS. HongCMS suffers from an arbitrary file deletion vulnerability. An attacker can exploit this vulnerability to delete arbitrary files...
HongCMS suffers from an arbitrary file deletion vulnerability (CNVD-2019-40717)
HongCMS is an open source lightweight content management system CMS. HongCMS suffers from an arbitrary file deletion vulnerability. An attacker can exploit this vulnerability to delete arbitrary files...
Arbitrary File Deletion Vulnerability in HongCMS (CNVD-2019-40716)
HongCMS is an open source lightweight content management system CMS. HongCMS suffers from an arbitrary file deletion vulnerability. An attacker can exploit this vulnerability to delete arbitrary files...
CVE-2019-16867
HongCMS 3.0.0 allows arbitrary file deletion via a ../ in the file parameter to admin/index.php/database/ajax?action=delete, a similar issue to CVE-2018-16774. If the attacker deletes config.php and visits install/index.php, they can reinstall the product...
CVE-2019-16867
HongCMS 3.0.0 allows arbitrary file deletion via a ../ in the file parameter to admin/index.php/database/ajax?action=delete, a similar issue to CVE-2018-16774. If the attacker deletes config.php and visits install/index.php, they can reinstall the product...
Arbitrary file deletion
HongCMS 3.0.0 allows arbitrary file deletion via a ../ in the file parameter to admin/index.php/database/ajax?action=delete, a similar issue to CVE-2018-16774. If the attacker deletes config.php and visits install/index.php, they can reinstall the product...
CVE-2019-16867
HongCMS 3.0.0 allows arbitrary file deletion via a ../ in the file parameter to admin/index.php/database/ajax?action=delete, a similar issue to CVE-2018-16774. If the attacker deletes config.php and visits install/index.php, they can reinstall the product...
CVE-2019-16867
HongCMS 3.0.0 is affected by a path-traversal vulnerability allowing arbitrary file deletion via a ../ in the file parameter to admin/index.php/database/ajax?action=delete (and similar CVE-2018-16774 path). Root cause is insufficient validation of the file path, enabling deletion of critical file...
PT-2019-14838
Name of the Vulnerable Software and Affected Versions HongCMS version 3.0.0 Description The issue allows for arbitrary file deletion by utilizing a ../ in the file parameter to the "admin/index.php/database/ajax" endpoint with the action set to delete. This can be exploited to delete critical fil...
CVE-2019-16867: Improper Limitation of a Pathname to a Restricted Directory
HongCMS 3.0.0 allows arbitrary file deletion via a ../ in the file parameter to admin/index.php/database/ajax?action=delete, a similar issue to CVE-2018-16774. If the attacker deletes config.php and visits install/index.php, they can reinstall the product...
Arbitrary File Deletion and Directory Traversal Vulnerabilities in HongCMS
HongCMS Chinese and English website system is a lightweight website system with extremely fast access speed and easy to use. HongCMS arbitrary file deletion and directory traversal vulnerability, an attacker can use the directory traversal vulnerability can be used with the code execution...
Information leakage vulnerability in HongCMS backend
HongCMS Chinese and English website system is a lightweight website system , extremely fast access speed , easy to use . Program code is simple and rigorous , completely free and open source. HongCMS background information leakage vulnerabilities , attackers can use the vulnerability to obtain da...