medium5.0
CVE-2013-7138
Directory traversal vulnerability in lib/functions/d-load.php in Horizon Quick Content Management System (QCMS) 4.0 and earlier allows remote attackers to read…
Impact
Directory traversal vulnerability in lib/functions/d-load.php in Horizon Quick Content Management System (QCMS) 4.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the start parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Horizon Quick Content Management System Project | Horizon Quick Content Management System | through 4.0 Versions 3.2, 3.3, 3.4, 3.5.1, 3.5.2 |