Hongcms Security Vulnerabilities and Issues — Hongcms CVE List

Lucene search

Hongcms ProjectHongcms

2 matches found

CVE•added 2021/05/18 7:15 p.m.•34 views

CVE-2020-18178

Path Traversal in HongCMS v4.0.0 allows remote attackers to view, edit, and delete arbitrary files via a crafted POST request to the component "/hcms/admin/index.php/language/ajax."

9.8CVSS9.2AI score0.01781EPSS

CVE•added 2018/06/29 5:29 p.m.•31 views

CVE-2018-13021

An issue was discovered in HongCMS 3.0.0. There is an Arbitrary Script File Upload issue that can result in PHP code execution via the admin/index.php/template/upload URI.

9CVSS7.3AI score0.01438EPSS