Vulnerabilities (CVE)

Filtered by vendor Huocms Subscribe
Filtered by product Huocms
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-46078 1 Huocms 1 Huocms 2025-06-04 N/A 5.3 MEDIUM
HuoCMS V3.5.1 and before is vulnerable to file upload, which allows attackers to take control of the target server
CVE-2025-46080 1 Huocms 1 Huocms 2025-06-04 N/A 5.3 MEDIUM
HuoCMS V3.5.1 has a File Upload Vulnerability. An attacker can exploit this flaw to bypass whitelist restrictions and craft malicious files with specific suffixes, thereby gaining control of the server.