CVE-2020-28693

概要

参考情報

• jkana/HorizontCMS-1.0.0-beta-shell-upload · Exploit
• ttimot24/HorizontCMS · Third Party Advisory

horizontcms のその他の脆弱性

• CVE-2021-28428緊急 9.8File upload vulnerability in HorizontCMS before 1.0.0-beta.3 via uploading a .htaccess and *.hello files using the Media Files upload functi…
• CVE-2022-25104高 7.5HorizontCMS v1.0.0-beta.2 was discovered to contain an arbitrary file download vulnerability via the component /admin/file-manager/.
• CVE-2020-27387高 8.8An unrestricted file upload issue in HorizontCMS through 1.0.0-beta allows an authenticated remote attacker (with access to the FileManager)…