CVE-2021-28428

File upload vulnerability in HorizontCMS before 1.0.0-beta.3 via uploading a .htaccess and .hello files using the Media Files upload functionality. The original file upload vulnerability CVE-2020-27387 was remediated by restricting the PHP extensions; however, we confirmed that the filter was...

PT-2022-9891

Name of the Vulnerable Software and Affected Versions HorizontCMS versions prior to 1.0.0-beta.3 Description The issue allows for remote code execution by uploading specific files, such as .htaccess and .hello files, through the Media Files upload functionality. This bypasses the filter that was...