CVE-2020-28693

An unrestricted file upload issue in HorizontCMS 1.0.0-beta allows an authenticated remote attacker to upload PHP code through a zip file by uploading...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

An unrestricted file upload issue in HorizontCMS 1.0.0-beta allows an authenticated remote attacker to upload PHP code through a zip file by uploading a theme, and executing the PHP file via an HTTP GET request to /themes/

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory github.com
report github.com