Lucene search
+L

6 matches found

NVD
NVD
•added 2026/09/21 2:16 a.m.•23 views

CVE-2026-94110

A security vulnerability has been detected in QCMS up to 6.0.6. This issue affects the function selfTmp in the library Lib/Config/Controllers.php of the component Content Detail Page. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit...

7.5CVSS0.00411EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/21 1:30 a.m.•16 views

EUVD-2026-83822

A security vulnerability has been detected in QCMS up to 6.0.6. This issue affects the function selfTmp in the library Lib/Config/Controllers.php of the component Content Detail Page. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit...

7.5CVSS6.8AI score0.00411EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/09/21 1:30 a.m.•13 views

CVE-2026-94110 QCMS Content Detail Controllers.php self_Tmp sql injection

A security vulnerability has been detected in QCMS up to 6.0.6. This issue affects the function selfTmp in the library Lib/Config/Controllers.php of the component Content Detail Page. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit...

7.5CVSS6.8AI score0.00411EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/21 12:00 a.m.•8 views

CVE-2026-94110: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in QCMS up to 6.0.6. This issue affects the function selfTmp in the library Lib/Config/Controllers.php of the component Content Detail Page. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit...

7.5CVSS6.8AI score0.00411EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/21 12:00 a.m.•9 views

PT-2026-96030

Name of the Vulnerable Software and Affected Versions QCMS versions prior to 6.0.7 Description A remote SQL injection exists in the Content Detail Page component within the self Tmp function located in the Lib/Config/Controllers.php library. The issue occurs when the ID argument is manipulated...

7.5CVSS5.9AI score0.00411EPSS
SaveExploits0References9
Packet Storm
Packet Storm
•added 2008/12/09 12:00 a.m.•48 views

Google Analytics Stored Cross Site Scripting

====================================================== ================= = Google Analytics - Stored Cross Site Scripting Vulnerability = = Vendor Website: = http://www.google.com = = Affected Version: = -- http://www.google.com/analytics/ = = Public disclosure on 8th December 2008 =...

7.4AI score
SaveExploits0
Rows per page
Query Builder