221 matches found
CVE-2019-8407
HongCMS 3.0.0 allows arbitrary file read and write operations via a ../ in the filename parameter to the admin/index.php/language/edit URI...
Design/Logic Flaw
HongCMS 3.0.0 allows arbitrary file read and write operations via a ../ in the filename parameter to the admin/index.php/language/edit URI...
CVE-2019-8407
HongCMS 3.0.0 allows arbitrary file read and write operations via a ../ in the filename parameter to the admin/index.php/language/edit URI...
CVE-2019-8407
HongCMS 3.0.0 is affected by CVE-2019-8407 due to a path traversal in the filename parameter of admin/index.php/language/edit, allowing arbitrary file read and write. The underlying cause is improper handling of "../" in the filename, enabling access to sensitive files. Impact: partial confidenti...
PT-2019-19015
Name of the Vulnerable Software and Affected Versions HongCMS version 3.0.0 Description The issue allows for arbitrary file read and write operations. This is achieved by utilizing a ../ in the filename parameter to the "admin/index.php/language/edit" API endpoint. Recommendations For HongCMS...
CVE-2019-8407: Improper Limitation of a Pathname to a Restricted Directory
HongCMS 3.0.0 allows arbitrary file read and write operations via a ../ in the filename parameter to the admin/index.php/language/edit URI...
Code execution vulnerability in HongCMS v3.0.0 (CNVD-2018-21958)
HongCMS is an open source lightweight content management system CMS. A code execution vulnerability exists in the te.php page in HongCMS v3.0.0, which can be exploited by attackers to execute arbitrary code...
HongCMS v3.0.0 Exists Backend Privilege Authentication Bypass Vulnerability
HongCMS is an open source lightweight content management system CMS. HongCMS v3.0.0 has a backend authentication bypass vulnerability, which can be exploited by an attacker to log in directly to the backend using the administrator's identity without authentication...
Code Execution Vulnerability in HongCMS v3.0.0
HongCMS is an open source lightweight content management system CMS. A code execution vulnerability exists in HongCMS v3.0.0, which can be exploited by attackers to execute arbitrary code...
CVE-2018-16774
HongCMS 3.0.0 allows arbitrary file deletion via a ../ in the file parameter to admin/index.php/language/ajax?action=delete...
CVE-2018-16774
HongCMS 3.0.0 allows arbitrary file deletion via a ../ in the file parameter to admin/index.php/language/ajax?action=delete...
Arbitrary file deletion
HongCMS 3.0.0 allows arbitrary file deletion via a ../ in the file parameter to admin/index.php/language/ajax?action=delete...
CVE-2018-16774
HongCMS 3.0.0 allows arbitrary file deletion via a ../ in the file parameter to admin/index.php/language/ajax?action=delete...
CVE-2018-16774
CVE-2018-16774 concerns HongCMS 3.0.0, where an improper validation in the file parameter enables directory traversal to delete files via admin/index.php/language/ajax?action=delete (and related path admin/index.php/database/ajax?action=delete). The underlying issue is a traversal vulnerability t...
HongCMS Arbitrary File Deletion Vulnerability
HongCMS is an open source lightweight content management system CMS. HongCMS suffers from an arbitrary file deletion vulnerability. An attacker can exploit this vulnerability to delete arbitrary files...
CVE-2018-16774: Improper Limitation of a Pathname to a Restricted Directory
HongCMS 3.0.0 allows arbitrary file deletion via a ../ in the file parameter to admin/index.php/language/ajax?action=delete...
PT-2018-13738
Name of the Vulnerable Software and Affected Versions HongCMS version 3.0.0 Description The issue allows for arbitrary file deletion. This can be achieved by manipulating the file parameter in the /admin/index.php/language/ajax endpoint with a ../ sequence and setting the action parameter to...
Code execution vulnerability in HongCMS v3.0 la***.php page
HongCMS is an open source lightweight content management system CMS. HongCMS v3.0 la.php page code execution vulnerability, the vulnerability stems from the background failed to strictly filter the login management file, an attacker can exploit the vulnerability, resulting in arbitrary file writi...
HongCMS Arbitrary Script File Upload Vulnerability
HongCMS is an open source lightweight content management system CMS. HongCMS 3.0.0 suffers from an arbitrary script file upload vulnerability. An attacker can exploit this vulnerability by uploading arbitrary script files via admin/index.php/template/upload URI to execute PHP code...