Vulnerabilities (CVE)

Filtered by vendor Q-cms Subscribe
Total 11 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-10578 1 Q-cms 1 Qcms 2023-12-10 5.0 MEDIUM 7.5 HIGH
An arbitrary file read vulnerability exists in system/controller/backend/template.php in QCMS v3.0.1.
CVE-2018-14977 1 Q-cms 1 Qcms 2023-12-10 4.3 MEDIUM 6.1 MEDIUM
An issue was discovered in QCMS 3.0.1. upload/System/Controller/guest.php has XSS, as demonstrated by the name parameter, a different vulnerability than CVE-2018-8070.
CVE-2018-14974 1 Q-cms 1 Qcms 2023-12-10 3.5 LOW 4.8 MEDIUM
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/news.php has XSS.
CVE-2018-14972 1 Q-cms 1 Qcms 2023-12-10 3.5 LOW 4.8 MEDIUM
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/down.php has XSS.
CVE-2018-14973 1 Q-cms 1 Qcms 2023-12-10 3.5 LOW 4.8 MEDIUM
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/product.php has XSS.
CVE-2018-14971 1 Q-cms 1 Qcms 2023-12-10 3.5 LOW 4.8 MEDIUM
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/user.php has XSS.
CVE-2018-14978 1 Q-cms 1 Qcms 2023-12-10 6.8 MEDIUM 8.8 HIGH
An issue was discovered in QCMS 3.0.1. CSRF exists via the backend/user/admin/add.html URI.
CVE-2018-14969 1 Q-cms 1 Qcms 2023-12-10 3.5 LOW 4.8 MEDIUM
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/system.php has XSS.
CVE-2018-14975 1 Q-cms 1 Qcms 2023-12-10 3.5 LOW 4.8 MEDIUM
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/album.php has XSS.
CVE-2018-14976 1 Q-cms 1 Qcms 2023-12-10 3.5 LOW 4.8 MEDIUM
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/category.php has XSS.
CVE-2018-14970 1 Q-cms 1 Qcms 2023-12-10 3.5 LOW 4.8 MEDIUM
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/slideshow.php has XSS.