CVE-2020-26043

An issue was discovered in Hoosk CMS v1.8.0. There is a XSS vulnerability in install/index.php...

Sql injection

An issue was discovered in Hoosk CMS v1.8.0. There is a SQL injection vulnerability in install/index.php...

Cross site scripting

An issue was discovered in Hoosk CMS v1.8.0. There is a XSS vulnerability in install/index.php...

CVE-2020-26042

An issue was discovered in Hoosk CMS v1.8.0. There is a SQL injection vulnerability in install/index.php...

CVE-2020-26042

CVE-2020-26042 affects Hoosk CMS v1.8.0 with a SQL injection vulnerability in install/index.php. Per the connected NVD record, the issue yields partial confidentiality, partial integrity, and partial availability impacts (CVSS v2 base 7.5, HIGH; CVSS v3.1 base 9.8, CRITICAL). Exploitation details...

CVE-2020-26041

An issue was discovered in Hoosk CmS v1.8.0. There is an Remote Code Execution vulnerability in install/index.php...

CVE-2012-1495

install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the formsingleuserlogin parameter...

CVE-2019-17608

HongCMS 3.0.0 has XSS via the install/index.php dbname parameter...

CVE-2019-17611

HongCMS 3.0.0 has XSS via the install/index.php tableprefix parameter...

CVE-2019-17607

HongCMS 3.0.0 has XSS via the install/index.php servername parameter...

CVE-2019-17610

HongCMS 3.0.0 has XSS via the install/index.php dbpassword parameter...

Design/Logic Flaw

HongCMS 3.0.0 has XSS via the install/index.php dbpassword parameter...

Design/Logic Flaw

HongCMS 3.0.0 has XSS via the install/index.php tableprefix parameter...

Design/Logic Flaw

HongCMS 3.0.0 has XSS via the install/index.php servername parameter...

Design/Logic Flaw

HongCMS 3.0.0 has XSS via the install/index.php dbusername parameter...

CVE-2019-17609

HongCMS 3.0.0 has XSS via the install/index.php dbusername parameter...

CVE-2019-17608

HongCMS 3.0.0 has XSS via the install/index.php dbname parameter...

CVE-2019-17608

Affected software: HongCMS 3.0.0. Vulnerability: Cross-Site Scripting via the install/index.php dbname parameter. Vector/Root cause: unsanitized/input handling leads to client-side script execution. Impact: attacker can execute client-side code. References: NVD entry describes XSS via the dbname ...

CVE-2019-17607

HongCMS 3.0.0 has XSS via the install/index.php servername parameter...

CVE-2019-16867

HongCMS 3.0.0 allows arbitrary file deletion via a ../ in the file parameter to admin/index.php/database/ajax?action=delete, a similar issue to CVE-2018-16774. If the attacker deletes config.php and visits install/index.php, they can reinstall the product...