Skip to content

CVE-2018-12912 An issue wan discovered in admin\controllers\database.php in HongCMS 3.0.0. There is a SQL Injection vulnerability via an admin/index.php/database/operate?dbaction=emptytable&tablename= URI.

HighCVSS 7.2 EPSS 2.6%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

An issue wan discovered in admin\controllers\database.php in HongCMS 3.0.0. There is a SQL Injection vulnerability via an admin/index.php/database/operate?dbaction=emptytable&tablename= URI.

Affected products

ProductAffected versionsFixed in
hongcms project hongcms = 3.0.0 No fix listed

References

  • github.com third-party-advisory
  • 44953 exploit third-party-advisory vdb-entry