Skip to content
OpenAdvisories
High · 8.8 CVE-2020-21252 EUVD-2020-14025GHSA-95vj-3rv6-35hp

Cross Site Request Forgery vulnerability in Neeke HongCMS 3.0.0 allows a remote attacker to execute arbitrary code and escalate privileges …

Published Jun 20, 2023 · Updated Dec 10, 2024 · Assigned by mitre

Description

Cross Site Request Forgery vulnerability in Neeke HongCMS 3.0.0 allows a remote attacker to execute arbitrary code and escalate privileges via the updateusers parameter.

References