Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown
CVE-2024-52677
Disclosure Date: November 20, 2024 (last updated December 21, 2024)
HkCms <= v2.3.2.240702 is vulnerable to file upload in the getFileName method in /app/common/library/Upload.php.
0
Attacker Value
Unknown
CVE-2023-40786
Disclosure Date: September 11, 2023 (last updated October 08, 2023)
HKcms v2.3.0.230709 is vulnerable to Cross Site Scripting (XSS) allowing administrator cookies to be stolen.
0
Attacker Value
Unknown
CVE-2023-1482
Disclosure Date: March 18, 2023 (last updated February 24, 2025)
A vulnerability, which was classified as problematic, was found in HkCms 2.2.4.230206. This affects an unknown part of the file /admin.php/appcenter/local.html?type=addon of the component External Plugin Handler. The manipulation leads to code injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223365 was assigned to this vulnerability.
0
