CVE-2018-0537

CVE-2018-0537 describes a cross-site scripting (CWE-79) vulnerability in QQQ SYSTEMS ver2.24. The flaw resides in the quiz_op.cgi CGI script, allowing an attacker-controlled script or HTML to be injected and executed in a victim’s browser when visiting a page that uses the product. Reported impac...

CVE-2018-0539

The CVE-2018-0539 entry concerns QQQ SYSTEMS version 2.24, a Perl CGI-based quiz tool, which contains an OS command injection vulnerability (CWE-78). Connected sources confirm that an attacker can execute arbitrary commands on the server with the web server’s privileges, due to the vulnerable com...

CVE-2018-0538

Cross-site scripting vulnerability in QQQ SYSTEMS ver2.24 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0536

Cross-site scripting vulnerability in QQQ SYSTEMS ver2.24 allows an attacker to inject arbitrary web script or HTML via quiz.cgi...

CVE-2018-0538

The CVE-2018-0538 entry concerns QQQ SYSTEMS ver2.24, a CGI-based quiz-system that contains a stored cross-site scripting vulnerability (CWE-79). Affected component is the web UI handling administrative/arbitrary input that can be crafted to execute arbitrary scripts in the victim’s browser, enab...

CVE-2018-0536

QQQ SYSTEMS (ver2.24) exposes a cross-site scripting vulnerability in quiz.cgi (CWE-79). The CGI-based quiz page creator allows an attacker to inject arbitrary web scripts via quiz.cgi, potentially affecting users who load malicious pages. Reported in multiple sources (CNVD/NVD/JVN) with impact d...

QQQ SYSTEMS vulnerable to arbitrary command injection

Overview QQQ SYSTEMS provided by Gundam Cult QQQ is a perl CGI script to create quiz pages. QQQ SYSTEMS contains an OS command injection vulnerability CWE-78. During the meeting of Committee for authorizing the disclosure of unresolved vulnerabilities held on December 5, 2017, it was judged that ...

QQQ SYSTEMS vulnerable to cross-site scripting

Overview QQQ SYSTEMS provided by Gundam Cult QQQ is a CGI script to create quiz pages. QQQ SYSTEMS contains a stored cross-site scripting vulnerability CWE-79. When an administrative user of the software accesses a malicious page created by an attacker, an arbitrary script may be executed. Note...

QQQ SYSTEMS vulnerable to cross-site scripting

Overview QQQ SYSTEMS provided by Gundam Cult QQQ is a CGI script to create quiz pages. quizop.cgi of QQQ SYSTEMS contains a cross-site scripting vulnerability CWE-79. When a user accesses a malicious page and is redirected to a page created with the product, an arbitrary script may be executed on...

JVN#46471407: QQQ SYSTEMS vulnerable to cross-site scripting

QQQ SYSTEMS provided by Gundam Cult QQQ is a CGI script to create quiz pages. QQQ SYSTEMS contains a stored cross-site scripting vulnerability CWE-79. When an administrative user of the software accesses a malicious page created by an attacker, an arbitrary script may be executed. Impact Due to...

JVN#64990648: QQQ SYSTEMS vulnerable to cross-site scripting

QQQ SYSTEMS provided by Gundam Cult QQQ is a CGI script to create quiz pages. quiz.cgi of QQQ SYSTEMS contains a cross-site scripting vulnerability CWE-79. When a user accesses a malicious page and is redirected to a page created with the product, an arbitrary script may be executed on the user's...

JVN#22536871: QQQ SYSTEMS vulnerable to arbitrary command injection

QQQ SYSTEMS provided by Gundam Cult QQQ is a perl CGI script to create quiz pages. QQQ SYSTEMS contains an OS command injection vulnerability CWE-78. Impact An attacker may execute an arbitrary OS command with the web server's execution privilege. Solution Consider stop using QQQ SYTEMS 2.24 Sinc...

JVN#96655441: QQQ SYSTEMS vulnerable to cross-site scripting

QQQ SYSTEMS provided by Gundam Cult QQQ is a CGI script to create quiz pages. quizop.cgi of QQQ SYSTEMS contains a cross-site scripting vulnerability CWE-79. When a user accesses a malicious page and is redirected to a page created with the product, an arbitrary script may be executed on the user...