Description
HongCMS 3.0.0 allows arbitrary file read and write operations via a ../ in the filename parameter to the admin/index.php/language/edit URI.
Unscored
CVE-2019-8407
EUVD-2019-17797GHSA-8fj7-f6jq-9qw4
HongCMS 3.0.0 allows arbitrary file read and write operations via a ../ in the filename parameter to the admin/index.php/language/edit URI.
Published Feb 17, 2019 · Updated Aug 4, 2024 · Assigned by mitre