PT-2022-21306
CVE-2022-32411
·
Published
2022-07-01
·
Updated
2022-07-13
Description by
CVSS 3.1
7.2
HighMetricsAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
HongCMS version 3.0
Description
An issue in the languages config file allows attackers to getshell.
Recommendations
For HongCMS version 3.0, consider restricting access to the languages config file until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾