Skip to contentHongcms Project Hongcms vulnerabilities
- hongcms project hongcmsCross Site Request Forgery vulnerability in Neeke HongCMS 3.0.0 allows a remote attacker to...CVE-2020-212528.8 High
- hongcms project hongcmsCross Site Scripting (XSS) vulnerability in HongCMS 3.0 allows attackers to run arbitrary code...CVE-2020-216436.1 Medium
- hongcms project hongcmsAn issue in the /template/edit component of HongCMS v3.0 allows attackers to getshell.CVE-2022-324127.2 High
- hongcms project hongcmsAn issue in the languages config file of HongCMS v3.0 allows attackers to getshell.CVE-2022-324117.2 High
- hongcms project hongcmsHongCMS 3.0.0 allows arbitrary file deletion via the component /admin/index.php/template/ajax...CVE-2022-285238.1 High
- hongcms project hongcmsHongCMS v3.0 contains an arbitrary file read and write vulnerability in the component /admin...CVE-2020-214316.5 Medium
- hongcms project hongcmsPath Traversal in HongCMS v4.0.0 allows remote attackers to view, edit, and delete arbitrary...CVE-2020-181789.8 Critical
- hongcms project hongcmsHongCMS 3.0.0 has XSS via the install/index.php tableprefix parameter.CVE-2019-176116.1 Medium
- hongcms project hongcmsHongCMS 3.0.0 has XSS via the install/index.php dbpassword parameter.CVE-2019-176106.1 Medium
- hongcms project hongcmsHongCMS 3.0.0 has XSS via the install/index.php dbusername parameter.CVE-2019-176096.1 Medium
- hongcms project hongcmsHongCMS 3.0.0 has XSS via the install/index.php dbname parameter.CVE-2019-176086.1 Medium
- hongcms project hongcmsHongCMS 3.0.0 has XSS via the install/index.php servername parameter.CVE-2019-176076.1 Medium
- hongcms project hongcmsHongCMS 3.0.0 allows arbitrary file deletion via a ../ in the file parameter to admin/index.php...CVE-2019-168676.5 Medium
- hongcms project hongcmsHongCMS 3.0.0 allows arbitrary file read and write operations via a ../ in the filename parameter...CVE-2019-84076.5 Medium
- hongcms project hongcmsHongCMS 3.0.0 allows arbitrary file deletion via a ../ in the file parameter to admin/index.php...CVE-2018-167747.5 High
- hongcms project hongcmsAn issue was discovered in HongCMS 3.0.0. There is an Arbitrary Script File Upload issue that can...CVE-2018-130217.2 High
- hongcms project hongcmsAn issue wan discovered in admin\controllers\database.php in HongCMS 3.0.0. There is a SQL...CVE-2018-12912Public exploit7.2 High
- hongcms project hongcmssystem\errors\404.php in HongCMS 3.0.0 has XSS via crafted input that triggers a 404 HTTP status...CVE-2018-122666.1 Medium
- hongcms project hongcmsAn issue was discovered in HongCMS 3.0.0. The post news feature has Stored XSS via the content...CVE-2018-104224.8 Medium
- hongcms project hongcmsAn issue was discovered in HongCMS v3.0.0. There is a CSRF vulnerability that can add an...CVE-2018-102658.8 High