EUVD-2013-6921

Malware in sbrugna...

EUVD-2013-6922

Malware in sbrugna...

Sql injection

SQL injection vulnerability in download.php in Horizon Quick Content Management System QCMS 4.0 and earlier allows remote to execute arbitrary SQL commands via the category parameter...

PT-2014-3269

Name of the Vulnerable Software and Affected Versions Horizon Quick Content Management System QCMS versions 4.0 and earlier Description A directory traversal issue exists, allowing remote attackers to read arbitrary files by utilizing a .. dot dot in the start parameter. Recommendations For...

CVE-2013-7138: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in lib/functions/d-load.php in Horizon Quick Content Management System QCMS 4.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the start parameter...

CVE-2013-7139: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in download.php in Horizon Quick Content Management System QCMS 4.0 and earlier allows remote to execute arbitrary SQL commands via the category parameter...