CVE-2019-16867

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

HongCMS 3.0.0 allows arbitrary file deletion via a ../ in the file parameter to admin/index.php/database/ajax?action=delete, a similar issue to CVE-2018-16774. (If the attacker deletes config.php and visits install/index.php, they can reinstall the product.)

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-22

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/Neeke/HongCMS/issues/12Exploit, Third Party Advisory
https://github.com/Neeke/HongCMS/issues/12Exploit, Third Party Advisory

Timeline

Published: Sep 25, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-168689.8emlog through 6.0.0beta has an arbitrary file deletion vulnerability via an admin/data.php?action=dell_all_bak request with directory traver CVE-2019-168697.5Netty before 4.1.42.Final mishandles whitespace before the colon in HTTP headers (such as a "Transfer-Encoding : chunked" line), which leads CVE-2019-16877.5A vulnerability in the TCP proxy functionality for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD)CVE-2019-168719.8Beckhoff Embedded Windows PLCs through 3.1.4024.0, and Beckhoff Twincat on Windows Engineering stations, allow an attacker to achieve Remote CVE-2019-168729.9Portainer before 1.22.1 has Incorrect Access Control (issue 1 of 4).CVE-2019-168735.4Portainer before 1.22.1 has XSS (issue 1 of 2).CVE-2019-168746.5Portainer before 1.22.1 has Incorrect Access Control (issue 2 of 4).CVE-2019-168767.5Portainer before 1.22.1 allows Directory Traversal.CVE-2019-168778.8Portainer before 1.22.1 has Incorrect Access Control (issue 4 of 4).CVE-2019-168785.4Portainer before 1.22.1 has XSS (issue 2 of 2).CVE-2019-168799.8The Synergy Systems & Solutions (SSS) HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior, has a Missing Authentication for Critical Fu CVE-2019-16887.1A vulnerability in the management web interface of Cisco Network Assurance Engine (NAE) could allow an unauthenticated, local attacker to ga