CVE-2013-7138

Horizon Quick Content Management System < 4.0 - Path Traversal via Start Parameter

Title source: llm
STIX 2.1

Description

Directory traversal vulnerability in lib/functions/d-load.php in Horizon Quick Content Management System (QCMS) 4.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the start parameter.

References (2)

Core 2
Core References
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/64717

Scores

EPSS 0.0186
EPSS Percentile 76.6%

Details

CWE
CWE-22
Status published
Products (6)
horizon_quick_content_management_system_project/horizon_quick_content_management_system 3.2 a
horizon_quick_content_management_system_project/horizon_quick_content_management_system 3.3
horizon_quick_content_management_system_project/horizon_quick_content_management_system 3.4
horizon_quick_content_management_system_project/horizon_quick_content_management_system 3.5.1
horizon_quick_content_management_system_project/horizon_quick_content_management_system 3.5.2
horizon_quick_content_management_system_project/horizon_quick_content_management_system < 4.0
Published Jan 09, 2014
Tracked Since Feb 18, 2026