Vulnerabilities > Hongcms Project

DATE CVE VULNERABILITY TITLE RISK
2019-10-16 CVE-2019-17608 Cross-site Scripting vulnerability in Hongcms Project Hongcms 3.0.0
HongCMS 3.0.0 has XSS via the install/index.php dbname parameter.
network
low complexity
hongcms-project CWE-79
6.1
2019-10-16 CVE-2019-17607 Cross-site Scripting vulnerability in Hongcms Project Hongcms 3.0.0
HongCMS 3.0.0 has XSS via the install/index.php servername parameter.
network
low complexity
hongcms-project CWE-79
6.1
2019-09-25 CVE-2019-16867 Path Traversal vulnerability in Hongcms Project Hongcms 3.0.0
HongCMS 3.0.0 allows arbitrary file deletion via a ../ in the file parameter to admin/index.php/database/ajax?action=delete, a similar issue to CVE-2018-16774.
network
low complexity
hongcms-project CWE-22
6.5
2019-02-17 CVE-2019-8407 Path Traversal vulnerability in Hongcms Project Hongcms 3.0.0
HongCMS 3.0.0 allows arbitrary file read and write operations via a ../ in the filename parameter to the admin/index.php/language/edit URI.
network
low complexity
hongcms-project CWE-22
6.5
2018-09-10 CVE-2018-16774 Path Traversal vulnerability in Hongcms Project Hongcms 3.0.0
HongCMS 3.0.0 allows arbitrary file deletion via a ../ in the file parameter to admin/index.php/language/ajax?action=delete.
network
low complexity
hongcms-project CWE-22
7.5
2018-06-29 CVE-2018-13021 Unrestricted Upload of File with Dangerous Type vulnerability in Hongcms Project Hongcms 3.0.0
An issue was discovered in HongCMS 3.0.0.
network
low complexity
hongcms-project CWE-434
7.2
2018-06-27 CVE-2018-12912 SQL Injection vulnerability in Hongcms Project Hongcms 3.0.0
An issue wan discovered in admin\controllers\database.php in HongCMS 3.0.0.
network
low complexity
hongcms-project CWE-89
7.2
2018-06-13 CVE-2018-12266 Cross-site Scripting vulnerability in Hongcms Project Hongcms 3.0.0
system\errors\404.php in HongCMS 3.0.0 has XSS via crafted input that triggers a 404 HTTP status code.
network
low complexity
hongcms-project CWE-79
6.1
2018-04-26 CVE-2018-10422 Cross-site Scripting vulnerability in Hongcms Project Hongcms 3.0.0
An issue was discovered in HongCMS 3.0.0.
network
low complexity
hongcms-project CWE-79
4.8
2018-04-22 CVE-2018-10265 Cross-Site Request Forgery (CSRF) vulnerability in Hongcms Project Hongcms 3.0.0
An issue was discovered in HongCMS v3.0.0.
network
low complexity
hongcms-project CWE-352
8.8