CVE-2018-12912

概要

参考情報

• Neeke/HongCMS · Third Party Advisory
• exploit-db.com/exploits/44953 · Exploit

hongcms のその他の脆弱性

• CVE-2020-21252高 8.8Cross Site Request Forgery vulnerability in Neeke HongCMS 3.0.0 allows a remote attacker to execute arbitrary code and escalate privileges v…
• CVE-2020-21643中 6.1Cross Site Scripting (XSS) vulnerability in HongCMS 3.0 allows attackers to run arbitrary code via the callback parameter to /ajax/myshop.
• CVE-2022-32412高 7.2An issue in the /template/edit component of HongCMS v3.0 allows attackers to getshell.
• CVE-2022-32411高 7.2An issue in the languages config file of HongCMS v3.0 allows attackers to getshell.
• CVE-2022-28523高 8.1HongCMS 3.0.0 allows arbitrary file deletion via the component /admin/index.php/template/ajax?action=delete.