Read the docs

Horizontcms Project

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Horizontcms Project records in CISA KEV

No Horizontcms Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Horizontcms 4 records MEDIUM

Records

4 records

TI-2020-16653 CVE-2020-27387 · GHSA-fmrq-56mh-96f5

An unrestricted file upload issue in HorizontCMS through 1.0.0-beta allows an…

Priority MEDIUM 56

An unrestricted file upload issue in HorizontCMS through 1.0.0-beta allows an authenticated remote attacker (with access to the FileManager) to upload and execute arbitrary PHP code by uploading a PHP payload, and then u…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.18461 Published 2020-11-05 No fix listed CWE-434
TI-2020-17387 CVE-2020-28693 · GHSA-p5vc-h7j2-25qc

An unrestricted file upload issue in HorizontCMS 1.0.0-beta allows an authenticated…

Priority MEDIUM 43

An unrestricted file upload issue in HorizontCMS 1.0.0-beta allows an authenticated remote attacker to upload PHP code through a zip file by uploading a theme, and executing the PHP file via an HTTP GET request to /theme…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02528 Published 2020-11-16 No fix listed CWE-434
Open these records in search →