HongCMS 3.0.0 has XSS via the install/index.php tableprefix parameter.
References
Link | Resource |
---|---|
https://cdn1.imggmi.com/uploads/2019/10/13/94ef1b084a074ffd9ef63408529aed17-full.png | Exploit Third Party Advisory |
https://cdn1.imggmi.com/uploads/2019/10/13/e561884443c495286993e186f44dfd1f-full.png | Exploit Third Party Advisory |
https://cxsecurity.com/issue/WLB-2019100100 | Third Party Advisory |
Configurations
History
No history.
Information
Published : 2019-10-16 22:15
Updated : 2024-02-04 20:39
NVD link : CVE-2019-17611
Mitre link : CVE-2019-17611
CVE.ORG link : CVE-2019-17611
JSON object : View
Products Affected
hongcms_project
- hongcms
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')