horizontcms project records
4 published records for vendor horizontcms project.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 1 · 25%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-434 Unrestricted Upload of File with Dangerous Type3
- CWE-552 Files or Directories Accessible to External Parties1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
41Plan | CVE-2020-27387Weaponized | An unrestricted file upload issue in HorizontCMS through 1.0.0-beta allows an authenticated remote attacker (with access to the FileManager)horizontcms project · horizontcms · CWE-434 | High8.8 | — | 18.4% | Nov 4, 2020 |
39Monitor | CVE-2021-28428No exploit | File upload vulnerability in HorizontCMS before 1.0.0-beta.3 via uploading a .htaccess and *.hello files using the Media Files upload functihorizontcms project · horizontcms · CWE-434 | Critical9.8 | — | 1.2% | Apr 5, 2022 |
36Monitor | CVE-2020-28693No exploit | An unrestricted file upload issue in HorizontCMS 1.0.0-beta allows an authenticated remote attacker to upload PHP code through a zip file byhorizontcms project · horizontcms · CWE-434 | High8.8 | — | 2.5% | Nov 16, 2020 |
30Monitor | CVE-2022-25104No exploit | HorizontCMS v1.0.0-beta.2 was discovered to contain an arbitrary file download vulnerability via the component /admin/file-manager/.horizontcms project · horizontcms · CWE-552 | High7.5 | — | 1.1% | Feb 24, 2022 |
- CVE-2020-2738741Plan
An unrestricted file upload issue in HorizontCMS through 1.0.0-beta allows an authenticated remote attacker (with access to the FileManager)
HighCVSS 8.8WeaponizedEPSS 18%horizontcms project · horizontcmsNov 4, 2020
- CVE-2021-2842839Monitor
File upload vulnerability in HorizontCMS before 1.0.0-beta.3 via uploading a .htaccess and *.hello files using the Media Files upload functi
CriticalCVSS 9.8No exploitEPSS 1%horizontcms project · horizontcmsApr 5, 2022
- CVE-2020-2869336Monitor
An unrestricted file upload issue in HorizontCMS 1.0.0-beta allows an authenticated remote attacker to upload PHP code through a zip file by
HighCVSS 8.8No exploitEPSS 2%horizontcms project · horizontcmsNov 16, 2020
- CVE-2022-2510430Monitor
HorizontCMS v1.0.0-beta.2 was discovered to contain an arbitrary file download vulnerability via the component /admin/file-manager/.
HighCVSS 7.5No exploitEPSS 1%horizontcms project · horizontcmsFeb 24, 2022