CVE-2019-8407 - HongCMS 3.0.0 allows arbitrary file read and write operations via a ../ in the filename parameter to the admin/index.php/language/edit URI

MEDIUM

HongCMS 3.0.0 allows arbitrary file read and write operations via a ../ in the filename parameter to the admin/index.php/language/edit URI

Published Feb 17, 2019

6.5

MEDIUM

CVSS 3.0

EPSS 1.45%

HongCMS 3.0.0 allows arbitrary file read and write operations via a ../ in the filename parameter to the admin/index.php/language/edit URI.

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

https://github.com/Neeke/HongCMS/issues/7
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://github.com/Neeke/HongCMS/issues/7		x_refsource_MISCExploitThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Feb 17, 2019

Updated Aug 4, 2024

Reserved Feb 17, 2019

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a