167 matches found
Cross site scripting
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/slideshow.php has XSS...
CVE-2018-14969
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/system.php has XSS...
Design/Logic Flaw
An issue was discovered in QCMS 3.0.1. upload/System/Controller/guest.php has XSS, as demonstrated by the name parameter, a different vulnerability than CVE-2018-8070...
CVE-2018-14971
Affected software: QCMS 3.0.1. Vulnerability: Cross-site scripting (XSS) in upload/System/Controller/backend/user.php. Root cause/impact: The issue is a content/script injection vulnerability within the specified PHP file. Documents do not provide further detail on the underlying cause beyond the...
CVE-2018-14970
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/slideshow.php has XSS...
CVE-2018-14972
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/down.php has XSS...
CVE-2018-14975
Summary: QCMS 3.0.1 has a Cross-Site Scripting (XSS) vulnerability in upload/System/Controller/backend/album.php. Concretely : CNVD-2019-10280 describes an XSS in that file affecting QCMS 3.0.1, exploitable by remote attackers to inject arbitrary web script or HTML. This is consistent with CVE-20...
CVE-2018-14973
Summary: CVE-2018-14973 affects QCMS 3.0.1, with a cross-site scripting (XSS) vulnerability in the file path upload/System/Controller/backend/product.php. The connected documents corroborate an XSS issue in this component/version. No explicit exploitation details, affected subcomponents beyond th...
CVE-2018-14976
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/category.php has XSS...
CVE-2018-14970
CVE-2018-14970 affects QCMS 3.0.1, with a cross-site scripting (XSS) flaw in upload/System/Controller/backend/slideshow.php. The connected sources (CNVD, NVD, CVE listings) confirm the vulnerable component/file and the underlying issue is XSS, but do not provide exploit details, affected versions...
CVE-2018-14975
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/album.php has XSS...
CVE-2018-14969
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/system.php has XSS...
CVE-2018-14973
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/product.php has XSS...
CVE-2018-14971
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/user.php has XSS...
CVE-2018-14972
CVE-2018-14972 affects QCMS 3.0.1, with a cross-site scripting vulnerability in upload/System/Controller/backend/down.php. The issue is described across multiple records (NVD/CNVD/CVE entries) as an XSS in that file path; no specific exploit details, affected versions, or remediation are provided...
CVE-2018-14978
An issue was discovered in QCMS 3.0.1. CSRF exists via the backend/user/admin/add.html URI...
CVE-2018-14978
QCMS 3.0.1 contains a CSRF vulnerability via the backend/user/admin/add.html URI (CVE-2018-14978). The CNVD entry CNVD-2019-10282 documents this issue in QCMS 3.0.1, describing a cross-site forgery that enables unauthorized operations through that endpoint. The CVE entry notes the vulnerability a...
CVE-2018-14977
An issue was discovered in QCMS 3.0.1. upload/System/Controller/guest.php has XSS, as demonstrated by the name parameter, a different vulnerability than CVE-2018-8070...
CVE-2018-14974
CVE-2018-14974 affects QCMS 3.0.1, with a cross-site scripting (XSS) flaw in upload/System/Controller/backend/news.php. CNVD describes remote exploitation to inject arbitrary script/HTML; CVSS3 base score 4.8 (MEDIUM). No remediation details provided in the supplied documents.