Lucene search
China National Vulnerability DatabaseCNVD-2022-06550HistoryNov 17, 2020 - 12:00 a.m.
HorizontCMS File Upload Vulnerability
2020-11-1700:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
0.003 Low
EPSS
Percentile
66.1%
HorizontCMS is an open source, responsive content management system (CMS) built on Laravel 6, VueJs 2.6 and Bootstrap 3.4. HorizontCMS 1.0.0-beta is vulnerable to unrestricted file uploads. An attacker can exploit this vulnerability to upload PHP code via zip file and execute PHP files via HTTP GET request /themes/<php_file_name>.
Related
osv
osv
CVE-2020-28693
2020-11-16 21:15:13
nvd
nvd
CVE-2020-28693
2020-11-16 21:15:13
cve
cve
CVE-2020-28693
2020-11-16 21:15:13
cvelist
cvelist
CVE-2020-28693
2020-11-16 20:42:22
prion
prion
Unrestricted file upload
2020-11-16 21:15:00