Vendor

Neozhaoliang

Products

CVEs

Across products

Status

Private

Products

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2022-28523	Neozhaoliang Hongcms	Hig	0.53	8.1	0.01	Apr 26, 2022	HongCMS 3.0.0 allows arbitrary file deletion via the component /admin/index.php/template/ajax?action=delete.
CVE-2018-13021	Neeke Hongcms	Hig	0.47	7.2	0.02	Jun 29, 2018	An issue was discovered in HongCMS 3.0.0. There is an Arbitrary Script File Upload issue that can result in PHP code execution via the admin/index.php/template/upload URI.
CVE-2019-17611	Neozhaoliang Hongcms	Med	0.40	6.1	0.01	Oct 16, 2019	HongCMS 3.0.0 has XSS via the install/index.php tableprefix parameter.
CVE-2019-17610	Neozhaoliang Hongcms	Med	0.40	6.1	0.01	Oct 16, 2019	HongCMS 3.0.0 has XSS via the install/index.php dbpassword parameter.
CVE-2019-17609	Neozhaoliang Hongcms	Med	0.40	6.1	0.01	Oct 16, 2019	HongCMS 3.0.0 has XSS via the install/index.php dbusername parameter.
CVE-2019-17608	Neozhaoliang Hongcms	Med	0.40	6.1	0.01	Oct 16, 2019	HongCMS 3.0.0 has XSS via the install/index.php dbname parameter.
CVE-2019-17607	Neozhaoliang Hongcms	Med	0.40	6.1	0.01	Oct 16, 2019	HongCMS 3.0.0 has XSS via the install/index.php servername parameter.

CVE-2022-28523HigApr 26, 2022
Neozhaoliang
Hongcms
risk 0.53cvss 8.1epss 0.01
HongCMS 3.0.0 allows arbitrary file deletion via the component /admin/index.php/template/ajax?action=delete.
CVE-2018-13021HigJun 29, 2018
Neeke
Hongcms
risk 0.47cvss 7.2epss 0.02
An issue was discovered in HongCMS 3.0.0. There is an Arbitrary Script File Upload issue that can result in PHP code execution via the admin/index.php/template/upload URI.
CVE-2019-17611MedOct 16, 2019
Neozhaoliang
Hongcms
risk 0.40cvss 6.1epss 0.01
HongCMS 3.0.0 has XSS via the install/index.php tableprefix parameter.
CVE-2019-17610MedOct 16, 2019
Neozhaoliang
Hongcms
risk 0.40cvss 6.1epss 0.01
HongCMS 3.0.0 has XSS via the install/index.php dbpassword parameter.
CVE-2019-17609MedOct 16, 2019
Neozhaoliang
Hongcms
risk 0.40cvss 6.1epss 0.01
HongCMS 3.0.0 has XSS via the install/index.php dbusername parameter.
CVE-2019-17608MedOct 16, 2019
Neozhaoliang
Hongcms
risk 0.40cvss 6.1epss 0.01
HongCMS 3.0.0 has XSS via the install/index.php dbname parameter.
CVE-2019-17607MedOct 16, 2019
Neozhaoliang
Hongcms
risk 0.40cvss 6.1epss 0.01
HongCMS 3.0.0 has XSS via the install/index.php servername parameter.