Hongcms Security Vulnerabilities and Issues — Hongcms CVE List

Lucene search

Hongcms ProjectHongcms

6 matches found

CVE•added 2018/06/27 6:29 p.m.•48 views

CVE-2018-12912

An issue wan discovered in admin\controllers\database.php in HongCMS 3.0.0. There is a SQL Injection vulnerability via an admin/index.php/database/operate?dbaction=emptytable&tablename= URI.

7.2CVSS7.3AI score0.01873EPSS

CVE•added 2018/06/13 11:29 a.m.•35 views

CVE-2018-12266

system\errors\404.php in HongCMS 3.0.0 has XSS via crafted input that triggers a 404 HTTP status code.

6.1CVSS5.9AI score0.0024EPSS

CVE•added 2018/04/22 1:29 a.m.•34 views

CVE-2018-10265

An issue was discovered in HongCMS v3.0.0. There is a CSRF vulnerability that can add an administrator account via the admin/index.php/users/save URI.

8.8CVSS8.6AI score0.00141EPSS

CVE•added 2018/04/26 5:29 a.m.•32 views

CVE-2018-10422

An issue was discovered in HongCMS 3.0.0. The post news feature has Stored XSS via the content field.

4.8CVSS4.8AI score0.00235EPSS

CVE•added 2018/06/29 5:29 p.m.•31 views

CVE-2018-13021

An issue was discovered in HongCMS 3.0.0. There is an Arbitrary Script File Upload issue that can result in PHP code execution via the admin/index.php/template/upload URI.

9CVSS7.3AI score0.01438EPSS

CVE•added 2018/09/10 4:29 a.m.•26 views

CVE-2018-16774

HongCMS 3.0.0 allows arbitrary file deletion via a ../ in the file parameter to admin/index.php/language/ajax?action=delete.

7.5CVSS6.5AI score0.00523EPSS