What’s Vulnerable › Vulnerabilities

CVE-2019-17610

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-10-16 · updated 2026-06-17
• Weakness: CWE-79

Description

HongCMS 3.0.0 has XSS via the install/index.php dbpassword parameter.

Affected products

• Hongcms Project Hongcms: 3.0.0

References

• https://cdn1.imggmi.com/uploads/2019/10/13/94ef1b084a074ffd9ef63408529aed17-full.png
• https://cdn1.imggmi.com/uploads/2019/10/13/e561884443c495286993e186f44dfd1f-full.png
• https://cxsecurity.com/issue/WLB-2019100100
• https://cdn1.imggmi.com/uploads/2019/10/13/94ef1b084a074ffd9ef63408529aed17-full.png
• https://cdn1.imggmi.com/uploads/2019/10/13/e561884443c495286993e186f44dfd1f-full.png
• https://cxsecurity.com/issue/WLB-2019100100

Get alerted when CVE-2019-17610 or the next vulnerability affects your stack