Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Horizontcms Project Clear all filters
TI-2020-17387 CVE-2020-28693 · GHSA-p5vc-h7j2-25qc

An unrestricted file upload issue in HorizontCMS 1.0.0-beta allows an authenticated…

Priority MEDIUM 43

An unrestricted file upload issue in HorizontCMS 1.0.0-beta allows an authenticated remote attacker to upload PHP code through a zip file by uploading a theme, and executing the PHP file via an HTTP GET request to /theme…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02528 Published 2020-11-16 No fix listed CWE-434
TI-2020-16653 CVE-2020-27387 · GHSA-fmrq-56mh-96f5

An unrestricted file upload issue in HorizontCMS through 1.0.0-beta allows an…

Priority MEDIUM 56

An unrestricted file upload issue in HorizontCMS through 1.0.0-beta allows an authenticated remote attacker (with access to the FileManager) to upload and execute arbitrary PHP code by uploading a PHP payload, and then u…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.18461 Published 2020-11-05 No fix listed CWE-434