Approved changes feed: RSS · Atom

cpe:2.3:a:hongcms_project:hongcms:3.0.0:*:*:*:*:*:*:*

part: a version: 3.0.0 update: *

VendorHongcms Project (e85b73fc-aac9-5e78-9499-2de06807e812)
ProductHongcms (4f0a7604-c73a-5f59-bfb7-6a6276c87399)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/neeke/hongcms purl2cpe 2026-06-01 10:17:49.918631

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-32412 vulnerable 2026-06-08 05:44:43.314702 Details available
An issue in the /template/edit component of HongCMS v3.0 allows attackers to getshell.
Published: 2022-07-01T21:32:32.000Z
Updated: 2024-08-03T07:39:51.226Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-32411 vulnerable 2026-06-08 05:44:43.314199 Details available
An issue in the languages config file of HongCMS v3.0 allows attackers to getshell.
Published: 2022-07-01T21:32:31.000Z
Updated: 2024-08-03T07:39:51.167Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28523 vulnerable 2026-06-08 05:42:44.574944 Details available
HongCMS 3.0.0 allows arbitrary file deletion via the component /admin/index.php/template/ajax?action=delete.
Published: 2022-04-26T20:29:29.000Z
Updated: 2024-08-03T05:56:15.588Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-21643 vulnerable 2026-06-08 05:22:30.976014 Details available
Cross Site Scripting (XSS) vulnerability in HongCMS 3.0 allows attackers to run arbitrary code via the callback parameter to /ajax/myshop.
Published: 2023-04-28T00:00:00.000Z
Updated: 2025-01-31T18:02:09.208Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-21431 vulnerable 2026-06-08 05:22:30.820601 Details available
HongCMS v3.0 contains an arbitrary file read and write vulnerability in the component /admin/index.php/template/edit.
Published: 2021-10-04T20:20:14.000Z
Updated: 2024-08-04T14:30:31.997Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-21252 vulnerable 2026-06-08 05:22:30.767012 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-8407 vulnerable 2026-06-08 05:14:24.096259 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17611 vulnerable 2026-06-08 05:13:10.837041 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17610 vulnerable 2026-06-08 05:13:10.836758 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17609 vulnerable 2026-06-08 05:13:10.836465 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17608 vulnerable 2026-06-08 05:13:10.836148 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17607 vulnerable 2026-06-08 05:13:10.835815 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-16867 vulnerable 2026-06-08 05:13:09.433950 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16774 vulnerable 2026-06-08 05:11:05.468190 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13021 vulnerable 2026-06-08 05:10:42.219026 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-12912 vulnerable 2026-06-08 05:10:42.115067 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-12266 vulnerable 2026-06-08 05:10:41.336329 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10422 vulnerable 2026-06-08 05:10:26.664138 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10265 vulnerable 2026-06-08 05:10:26.532177 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.