CVE-2025-25761

HkCms version v2.3.2.240702 is vulnerable to an arbitrary file write vulnerability within the Appcenter.php component. This flaw allows an attacker to write files to arbitrary locations, which could lead to significant security compromises. To mitigate this risk, it is recommended to disable the ...

File upload vulnerability exists in HKCMS (CNVD-2021-26307)

HKCMS is an open source content management system developed on the basis of Thinkphp 5.0 framework, using an independent grouping approach. HKCMS suffers from a file upload vulnerability that can be exploited by attackers to gain control of the server...