CVE-2020-21252

Description

References

• Neeke/HongCMS · Exploit

More vulnerabilities in hongcms

• CVE-2020-21643MEDIUM 6.1Cross Site Scripting (XSS) vulnerability in HongCMS 3.0 allows attackers to run arbitrary code via the callback parameter to /ajax/myshop.
• CVE-2022-32412HIGH 7.2An issue in the /template/edit component of HongCMS v3.0 allows attackers to getshell.
• CVE-2022-32411HIGH 7.2An issue in the languages config file of HongCMS v3.0 allows attackers to getshell.
• CVE-2022-28523HIGH 8.1HongCMS 3.0.0 allows arbitrary file deletion via the component /admin/index.php/template/ajax?action=delete.
• CVE-2020-21431MEDIUM 6.5HongCMS v3.0 contains an arbitrary file read and write vulnerability in the component /admin/index.php/template/edit.