CVE-2019-17610

Description

References

• cdn1.imggmi.com/uploads/2019/10/13/94ef1b084a074ffd9ef63408529aed17-full.png · Exploit
• cdn1.imggmi.com/uploads/2019/10/13/e561884443c495286993e186f44dfd1f-full.png · Exploit
• cxsecurity.com/issue/WLB-2019100100 · Third Party Advisory

hongcms의 다른 취약점

• CVE-2020-21252높음 8.8Cross Site Request Forgery vulnerability in Neeke HongCMS 3.0.0 allows a remote attacker to execute arbitrary code and escalate privileges v…
• CVE-2020-21643보통 6.1Cross Site Scripting (XSS) vulnerability in HongCMS 3.0 allows attackers to run arbitrary code via the callback parameter to /ajax/myshop.
• CVE-2022-32412높음 7.2An issue in the /template/edit component of HongCMS v3.0 allows attackers to getshell.
• CVE-2022-32411높음 7.2An issue in the languages config file of HongCMS v3.0 allows attackers to getshell.
• CVE-2022-28523높음 8.1HongCMS 3.0.0 allows arbitrary file deletion via the component /admin/index.php/template/ajax?action=delete.