Directory Traversal Vulnerability in Horizon Quick Content Management System by Horizon
CVE-2013-7138

Currently unrated

Key Information:

Vendor: Horizon Quick Content Management System Project
Status: Horizon Quick Content Management System
Vendor: CVE Published:; 9 January 2014

🔔 Create Horizon Quick Content Management System Project Vulnerability Alert

What is CVE-2013-7138?

The Horizon Quick Content Management System (QCMS) versions 4.0 and earlier are susceptible to a directory traversal vulnerability located in the file lib/functions/d-load.php. This flaw permits remote attackers to gain unauthorized access to arbitrary files on the server by manipulating the 'start' parameter to include directory traversal sequences. Consequently, this can lead to the exposure of sensitive information, thereby posing a significant security risk to the affected systems.

References

http://www.securityfocus.com/bid/64717

vdb-entryx_refsource_BID

https://www.htbridge.com/advisory/HTB23191

x_refsource_MISC

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jan 9, 2014
Vulnerability Reserved
Dec 18, 2013

CVE-2013-7138 Data

JSON