Description
An unrestricted file upload issue in HorizontCMS 1.0.0-beta allows an authenticated remote attacker to upload PHP code through a zip file by uploading a theme, and executing the PHP file via an HTTP GET request to /themes/<php_file_name>
Unscored
CVE-2020-28693
EUVD-2020-21091GHSA-p5vc-h7j2-25qc
An unrestricted file upload issue in HorizontCMS 1.0.0-beta allows an authenticated remote attacker to upload PHP code through a zip file b…
Published Nov 16, 2020 · Updated Aug 4, 2024 · Assigned by mitre