Hongcms Project vulnerabilities

Products

• Hongcms 20

Newest

• hongcms project hongcms Cross Site Request Forgery vulnerability in Neeke HongCMS 3.0.0 allows a remote attacker to... CVE-2020-21252 8.8 HighJune 20, 2023
• hongcms project hongcms Cross Site Scripting (XSS) vulnerability in HongCMS 3.0 allows attackers to run arbitrary code... CVE-2020-21643 6.1 MediumApril 28, 2023
• hongcms project hongcms An issue in the /template/edit component of HongCMS v3.0 allows attackers to getshell. CVE-2022-32412 7.2 HighJuly 1, 2022
• hongcms project hongcms An issue in the languages config file of HongCMS v3.0 allows attackers to getshell. CVE-2022-32411 7.2 HighJuly 1, 2022
• hongcms project hongcms HongCMS 3.0.0 allows arbitrary file deletion via the component /admin/index.php/template/ajax... CVE-2022-28523 8.1 HighApril 26, 2022
• hongcms project hongcms HongCMS v3.0 contains an arbitrary file read and write vulnerability in the component /admin... CVE-2020-21431 6.5 MediumOctober 4, 2021
• hongcms project hongcms Path Traversal in HongCMS v4.0.0 allows remote attackers to view, edit, and delete arbitrary... CVE-2020-18178 9.8 CriticalMay 18, 2021
• hongcms project hongcms HongCMS 3.0.0 has XSS via the install/index.php tableprefix parameter. CVE-2019-17611 6.1 MediumOctober 16, 2019
• hongcms project hongcms HongCMS 3.0.0 has XSS via the install/index.php dbpassword parameter. CVE-2019-17610 6.1 MediumOctober 16, 2019
• hongcms project hongcms HongCMS 3.0.0 has XSS via the install/index.php dbusername parameter. CVE-2019-17609 6.1 MediumOctober 16, 2019
• hongcms project hongcms HongCMS 3.0.0 has XSS via the install/index.php dbname parameter. CVE-2019-17608 6.1 MediumOctober 16, 2019
• hongcms project hongcms HongCMS 3.0.0 has XSS via the install/index.php servername parameter. CVE-2019-17607 6.1 MediumOctober 16, 2019
• hongcms project hongcms HongCMS 3.0.0 allows arbitrary file deletion via a ../ in the file parameter to admin/index.php... CVE-2019-16867 6.5 MediumSeptember 25, 2019
• hongcms project hongcms HongCMS 3.0.0 allows arbitrary file read and write operations via a ../ in the filename parameter... CVE-2019-8407 6.5 MediumFebruary 17, 2019
• hongcms project hongcms HongCMS 3.0.0 allows arbitrary file deletion via a ../ in the file parameter to admin/index.php... CVE-2018-16774 7.5 HighSeptember 10, 2018
• hongcms project hongcms An issue was discovered in HongCMS 3.0.0. There is an Arbitrary Script File Upload issue that can... CVE-2018-13021 7.2 HighJune 29, 2018
• hongcms project hongcms An issue wan discovered in admin\controllers\database.php in HongCMS 3.0.0. There is a SQL... CVE-2018-12912 Public exploit 7.2 HighJune 27, 2018
• hongcms project hongcms system\errors\404.php in HongCMS 3.0.0 has XSS via crafted input that triggers a 404 HTTP status... CVE-2018-12266 6.1 MediumJune 13, 2018
• hongcms project hongcms An issue was discovered in HongCMS 3.0.0. The post news feature has Stored XSS via the content... CVE-2018-10422 4.8 MediumApril 26, 2018
• hongcms project hongcms An issue was discovered in HongCMS v3.0.0. There is a CSRF vulnerability that can add an... CVE-2018-10265 8.8 HighApril 21, 2018