Lucene search
RootSSV:61309HistoryJan 09, 2014 - 12:00 a.m.
Horizon QCMS "/lib/functions/d-load.php"目录遍历漏洞
2014-01-0900:00:00
Root
www.seebug.org
14
0.008 Low
EPSS
Percentile
79.2%
CVE ID:CVE-2013-7138
Horizon QCMS是支持PHP与MySQL的开放源码的Horizon快速内容管理系统。
该漏洞的存在是由于传递到"/lib/functions/d-load.php"脚本的"start" HTTP GET参数"fopen()"方法中被使用前没有足够过滤，远程攻击者可以以Web服务器的权限在目标系统上读取任意文件内容。
0
Horizon QCMS<=4.0
厂商补丁：
Horizon
Horizon 4.0版本以修复此漏洞，建议用户下载使用：
The exploitation example below will display content of "/config.php" file that contains MySQL database login credentials:
http://[host]/lib/functions/d-load.php?start=../../config.php
Related
prion
prion
Directory traversal
2014-01-09 18:55:00
cve
cve
CVE-2013-7138
2014-01-09 18:55:00
cvelist
cvelist
CVE-2013-7138
2014-01-09 15:00:00
htbridge
htbridge
Multiple Vulnerabilities in Horizon QCMS
2013-12-18 00:00:00
securityvulns
securityvulns
Multiple Vulnerabilities in Horizon QCMS
2014-01-09 00:00:00
packetstorm
packetstorm
Horizon QCMS 4.0 SQL Injection / Directory Traversal
2014-01-08 00:00:00
openvas
openvas
Horizon QCMS Multiple Vulnerabilities
2014-01-17 00:00:00
exploitpack
exploitpack
Horizon QCMS 4.0 - Multiple Vulnerabilities
2014-01-14 00:00:00
exploitdb
exploitdb
Horizon QCMS 4.0 - Multiple Vulnerabilities
2014-01-14 00:00:00