Lucene search
K

7 matches found

CNVD
CNVD
added 2023/06/28 12:0 a.m.19 views

HongCMS Cross-Site Request Forgery Vulnerability (CNVD-2023-54439)

HongCMS is an open source lightweight content management system CMS. A cross-site request forgery CSRF vulnerability exists in HongCMS version 3.0.0. An attacker can exploit this vulnerability to execute arbitrary code and elevate privileges via the updateusers parameter...

8.8CVSS7.7AI score0.00896EPSS
Exploits1References1
OSV
OSV
added 2023/06/20 3:15 p.m.1 views

CVE-2020-21252

Cross Site Request Forgery vulnerability in Neeke HongCMS 3.0.0 allows a remote attacker to execute arbitrary code and escalate privileges via the updateusers parameter...

8.8CVSS6.1AI score
Exploits0References1
NVD
NVD
added 2023/06/20 3:15 p.m.7 views

CVE-2020-21252

Cross Site Request Forgery vulnerability in Neeke HongCMS 3.0.0 allows a remote attacker to execute arbitrary code and escalate privileges via the updateusers parameter...

8.8CVSS9.1AI score0.00896EPSS
Exploits1References1
Prion
Prion
added 2023/06/20 3:15 p.m.16 views

Cross site request forgery (csrf)

Cross Site Request Forgery vulnerability in Neeke HongCMS 3.0.0 allows a remote attacker to execute arbitrary code and escalate privileges via the updateusers parameter...

6.8CVSS9AI score0.00896EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2023/06/20 12:0 a.m.46 views

CVE-2020-21252

CVE-2020-21252 affects Neeke HongCMS 3.0.0. The vulnerability is a CSRF issue that can let an attacker remotely execute arbitrary code and elevate privileges via the updateusers parameter. Documented under CVE-2020-21252 with CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (base score 8.8). Exploi...

8.8CVSS9AI score0.00896EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2023/06/20 12:0 a.m.3 views

HongCMS 跨站请求伪造漏洞

HongCMS is an open source lightweight content management system CMS. A cross-site request forgery CSRF vulnerability exists in HongCMS version 3.0.0. An attacker can exploit this vulnerability to execute arbitrary code and elevate privileges via the updateusers parameter...

8.8CVSS7.7AI score0.00896EPSS
Exploits1References2
Cvelist
Cvelist
added 2023/06/20 12:0 a.m.13 views

CVE-2020-21252

Cross Site Request Forgery vulnerability in Neeke HongCMS 3.0.0 allows a remote attacker to execute arbitrary code and escalate privileges via the updateusers parameter...

9.1AI score0.00896EPSS
Exploits1References1
Rows per page
Query Builder