Lucene search

CVE-2021-28428

🗓️ 05 Apr 2022 16:11:15Reported by [email protected]Type

File upload vulnerability in HorizontCMS before 1.0.0-beta.3 via uploading .htaccess and *.hello files using Media Files upload functionality. Filter bypass allows RCE

Reporter	Title	Published	Views	Family All 13
Cvelist	CVE-2021-28428	5 Apr 202215:37	–	cvelist
Cvelist	CVE-2020-27387	5 Nov 202001:18	–	cvelist
CVE	CVE-2021-28428	5 Apr 202216:15	–	cve
CVE	CVE-2020-27387	5 Nov 202002:15	–	cve
OSV	CVE-2021-28428	5 Apr 202216:15	–	osv
OSV	CVE-2020-27387	5 Nov 202002:15	–	osv
Prion	Unrestricted file upload	5 Apr 202216:15	–	prion
Prion	Unrestricted file upload	5 Nov 202002:15	–	prion
NVD	CVE-2020-27387	5 Nov 202002:15	–	nvd
Packet Storm	HorizontCMS 1.0.0-beta Shell Upload	13 Nov 202000:00	–	packetstorm

Nvd

Node

horizontcms_project horizontcmsMatch1.0.0-

horizontcms_project horizontcmsMatch1.0.0alpha

horizontcms_project horizontcmsMatch1.0.0alpha2

horizontcms_project horizontcmsMatch1.0.0alpha3

horizontcms_project horizontcmsMatch1.0.0alpha4

horizontcms_project horizontcmsMatch1.0.0alpha5

horizontcms_project horizontcmsMatch1.0.0alpha6

horizontcms_project horizontcmsMatch1.0.0alpha7

horizontcms_project horizontcmsMatch1.0.0alpha8

horizontcms_project horizontcmsMatch1.0.0beta

horizontcms_project horizontcmsMatch1.0.0beta2

Source	Link
github	www.github.com/ttimot24/HorizontCMS/commit/9c4d6827cbe96decec6834d53660e14ab2bf8838
github	www.github.com/ttimot24/HorizontCMS

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

05 Apr 2022 16:15Current

CVSS27.5

CVSS39.8

EPSS0.176

CWE-434