HongCMS 3.0.0 has XSS via the install/index.php tableprefix parameter.
References
Link | Resource |
---|---|
https://cxsecurity.com/issue/WLB-2019100100 | Third Party Advisory |
https://cdn1.imggmi.com/uploads/2019/10/13/94ef1b084a074ffd9ef63408529aed17-full.png | Exploit Third Party Advisory |
https://cdn1.imggmi.com/uploads/2019/10/13/e561884443c495286993e186f44dfd1f-full.png | Exploit Third Party Advisory |
Configurations
Information
Published : 2019-10-16 15:15
Updated : 2019-10-18 12:28
NVD link : CVE-2019-17611
Mitre link : CVE-2019-17611
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
hongcms_project
- hongcms