jkana/HorizontCMS-1.0.0-beta-shell-upload

jkana/HorizontCMS-1.0.0-beta-shell-upload

GitHubGitHub
GitHubgithub.com
Releases0
Stars1
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2020-28693↗
8.8 HIGH9 HIGH

An unrestricted file upload issue in HorizontCMS 1.0.0-beta allows an authenticated remote attacker to upload PHP code through a zip file by uploading a theme, and executing the PHP file via an HTTP GET request to /themes/<php_file_name>