177 matches found
Arbitrary File Deletion Vulnerability in HongCMS (CNVD-2019-40716)
HongCMS is an open source lightweight content management system CMS. HongCMS suffers from an arbitrary file deletion vulnerability. An attacker can exploit this vulnerability to delete arbitrary files...
HongCMS suffers from an arbitrary file deletion vulnerability (CNVD-2019-40718)
HongCMS is an open source lightweight content management system CMS. HongCMS suffers from an arbitrary file deletion vulnerability. An attacker can exploit this vulnerability to delete arbitrary files...
CVE-2019-16867
HongCMS 3.0.0 allows arbitrary file deletion via a ../ in the file parameter to admin/index.php/database/ajax?action=delete, a similar issue to CVE-2018-16774. If the attacker deletes config.php and visits install/index.php, they can reinstall the product...
CVE-2019-16867
HongCMS 3.0.0 allows arbitrary file deletion via a ../ in the file parameter to admin/index.php/database/ajax?action=delete, a similar issue to CVE-2018-16774. If the attacker deletes config.php and visits install/index.php, they can reinstall the product...
Arbitrary file deletion
HongCMS 3.0.0 allows arbitrary file deletion via a ../ in the file parameter to admin/index.php/database/ajax?action=delete, a similar issue to CVE-2018-16774. If the attacker deletes config.php and visits install/index.php, they can reinstall the product...
CVE-2019-16867
HongCMS 3.0.0 allows arbitrary file deletion via a ../ in the file parameter to admin/index.php/database/ajax?action=delete, a similar issue to CVE-2018-16774. If the attacker deletes config.php and visits install/index.php, they can reinstall the product...
CVE-2019-16867
HongCMS 3.0.0 is affected by a path-traversal vulnerability allowing arbitrary file deletion via a ../ in the file parameter to admin/index.php/database/ajax?action=delete (and similar CVE-2018-16774 path). Root cause is insufficient validation of the file path, enabling deletion of critical file...
Arbitrary File Deletion and Directory Traversal Vulnerabilities in HongCMS
HongCMS Chinese and English website system is a lightweight website system with extremely fast access speed and easy to use. HongCMS arbitrary file deletion and directory traversal vulnerability, an attacker can use the directory traversal vulnerability can be used with the code execution...
Information leakage vulnerability in HongCMS backend
HongCMS Chinese and English website system is a lightweight website system , extremely fast access speed , easy to use . Program code is simple and rigorous , completely free and open source. HongCMS background information leakage vulnerabilities , attackers can use the vulnerability to obtain da...
CVE-2019-8407
HongCMS 3.0.0 allows arbitrary file read and write operations via a ../ in the filename parameter to the admin/index.php/language/edit URI...
Design/Logic Flaw
HongCMS 3.0.0 allows arbitrary file read and write operations via a ../ in the filename parameter to the admin/index.php/language/edit URI...
CVE-2019-8407
HongCMS 3.0.0 allows arbitrary file read and write operations via a ../ in the filename parameter to the admin/index.php/language/edit URI...
CVE-2019-8407
HongCMS 3.0.0 allows arbitrary file read and write operations via a ../ in the filename parameter to the admin/index.php/language/edit URI...
CVE-2019-8407
HongCMS 3.0.0 is affected by CVE-2019-8407 due to a path traversal in the filename parameter of admin/index.php/language/edit, allowing arbitrary file read and write. The underlying cause is improper handling of "../" in the filename, enabling access to sensitive files. Impact: partial confidenti...
Code execution vulnerability in HongCMS v3.0.0 (CNVD-2018-21958)
HongCMS is an open source lightweight content management system CMS. A code execution vulnerability exists in the te.php page in HongCMS v3.0.0, which can be exploited by attackers to execute arbitrary code...
HongCMS v3.0.0 Exists Backend Privilege Authentication Bypass Vulnerability
HongCMS is an open source lightweight content management system CMS. HongCMS v3.0.0 has a backend authentication bypass vulnerability, which can be exploited by an attacker to log in directly to the backend using the administrator's identity without authentication...
Code Execution Vulnerability in HongCMS v3.0.0
HongCMS is an open source lightweight content management system CMS. A code execution vulnerability exists in HongCMS v3.0.0, which can be exploited by attackers to execute arbitrary code...
CVE-2018-16774
HongCMS 3.0.0 allows arbitrary file deletion via a ../ in the file parameter to admin/index.php/language/ajax?action=delete...