CVE-2019-17611

HongCMS 3.0.0 has XSS via the install/index.php tableprefix parameter...

HongCMS SQL Injection Vulnerability

HongCMS is an open source lightweight content management system CMS. An SQL injection vulnerability exists in the admin\controllers\database.php file in HongCMS version 3.0.0. Remote attackers can use admin/index.php/database/operate?dbaction=emptytable&tablename= URI to execute arbitrary SQL...