CVE:CVE-2020-27387
CNNVD:CNNVD-202011-397
HorizontCMS是个人开发者的一个客户关系管理 Web 平台。
HorizontCMS 1.0.0-beta及之前版本存在代码问题漏洞，该漏洞 允许经过身份验证的远程攻击者通过上传PHP有效负载来执行任意PHP代码。
solution:Upgrade horizontcms_project horizontcms to a higher version than 1.0.0:alpha,1.0.0:alpha2,1.0.0:alpha3,1.0.0:alpha4,1.0.0:alpha5,1.0.0:alpha6,1.0.0:alpha7,1.0.0:alpha8,1.0.0:beta,and avoid the version 1.0.0:alpha,1.0.0:alpha2,1.0.0:alpha3,1.0.0:alpha4,1.0.0:alpha5,1.0.0:alpha6,1.0.0:alpha7,1.0.0:alpha8,1.0.0:beta