VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 9, 2014· Updated Apr 29, 2026

CVE-2013-7138

CVE-2013-7138

Description

Directory traversal vulnerability in lib/functions/d-load.php in Horizon Quick Content Management System (QCMS) 4.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the start parameter.

Affected products

6
  • Horizon Quick Content Management System Project/Horizon Quick Content Management System6 versions
    cpe:2.3:a:horizon_quick_content_management_system_project:horizon_quick_content_management_system:*:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:horizon_quick_content_management_system_project:horizon_quick_content_management_system:*:*:*:*:*:*:*:*range: <=4.0
    • cpe:2.3:a:horizon_quick_content_management_system_project:horizon_quick_content_management_system:3.2:a:*:*:*:*:*:*
    • cpe:2.3:a:horizon_quick_content_management_system_project:horizon_quick_content_management_system:3.3:*:*:*:*:*:*:*
    • cpe:2.3:a:horizon_quick_content_management_system_project:horizon_quick_content_management_system:3.4:*:*:*:*:*:*:*
    • cpe:2.3:a:horizon_quick_content_management_system_project:horizon_quick_content_management_system:3.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:horizon_quick_content_management_system_project:horizon_quick_content_management_system:3.5.2:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.