Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
hongcms project hongcms 3.0.0 vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2020-21643
Cross Site Scripting (XSS) vulnerability in HongCMS 3.0 allows malicious users to run arbitrary code via the callback parameter to /ajax/myshop.
Hongcms Project Hongcms 3.0.0
4.3
CVSSv2
CVE-2019-17607
HongCMS 3.0.0 has XSS via the install/index.php servername parameter.
Hongcms Project Hongcms 3.0.0
4.3
CVSSv2
CVE-2019-17608
HongCMS 3.0.0 has XSS via the install/index.php dbname parameter.
Hongcms Project Hongcms 3.0.0
4.3
CVSSv2
CVE-2019-17609
HongCMS 3.0.0 has XSS via the install/index.php dbusername parameter.
Hongcms Project Hongcms 3.0.0
4.3
CVSSv2
CVE-2019-17610
HongCMS 3.0.0 has XSS via the install/index.php dbpassword parameter.
Hongcms Project Hongcms 3.0.0
4.3
CVSSv2
CVE-2019-17611
HongCMS 3.0.0 has XSS via the install/index.php tableprefix parameter.
Hongcms Project Hongcms 3.0.0
NA
CVE-2020-21252
Cross Site Request Forgery vulnerability in Neeke HongCMS 3.0.0 allows a remote malicious user to execute arbitrary code and escalate privileges via the updateusers parameter.
Hongcms Project Hongcms 3.0.0
5.5
CVSSv2
CVE-2020-21431
HongCMS v3.0 contains an arbitrary file read and write vulnerability in the component /admin/index.php/template/edit.
Hongcms Project Hongcms 3.0.0
6.8
CVSSv2
CVE-2018-10265
An issue exists in HongCMS v3.0.0. There is a CSRF vulnerability that can add an administrator account via the admin/index.php/users/save URI.
Hongcms Project Hongcms 3.0.0
5.5
CVSSv2
CVE-2019-8407
HongCMS 3.0.0 allows arbitrary file read and write operations via a ../ in the filename parameter to the admin/index.php/language/edit URI.
Hongcms Project Hongcms 3.0.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48693
CVE-2024-30851
CVE-2024-34460
CVE-2024-2887
local
CVE-2024-27956
remote code execution
CVE-2024-34475
privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »