high7.2Public exploit code
CVE-2018-12912
An issue wan discovered in admin\controllers\database.php in HongCMS 3.0.0.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- HongCMS 3.0.0 - (Authenticated) SQL Injection2018-06-28 · webapps · php · Verified
Impact
An issue wan discovered in admin\controllers\database.php in HongCMS 3.0.0. There is a SQL Injection vulnerability via an admin/index.php/database/operate?dbaction=emptytable&tablename= URI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hongcms Project | Hongcms | Version 3.0.0 |