164 matches found
PT-2026-2299
Name of the Vulnerable Software and Affected Versions QloApps hotel eCommerce version 1.5.1 Description A Cross-Site Request Forgery CSRF issue exists in the index.php file. This allows an attacker to modify the administrator's email address by leveraging a malicious HTML document. Recommendation...
EUVD-2021-28225
A CSRF issue in index.php in QloApps hotel eCommerce 1.5.1 allows an attacker to change the admin's email address via a crafted HTML document...
CVE-2025-67325
Unrestricted file upload in the hotel review feature in QloApps versions 1.7.0 and earlier allows remote unauthenticated attackers to achieve remote code execution...
CVE-2025-67325
Unrestricted file upload in the hotel review feature in QloApps versions 1.7.0 and earlier allows remote unauthenticated attackers to achieve remote code execution...
CVE-2025-67325
Unrestricted file upload in the hotel review feature in QloApps versions 1.7.0 and earlier allows remote unauthenticated attackers to achieve remote code execution...
QloApps 安全漏洞
QloApps is a hotel management and reservation system from QloApps open source. A security vulnerability exists in QloApps version 1.7.0 and prior versions, which stems from improper file upload restrictions and could lead to remote code execution...
CVE-2025-67325
Unrestricted file upload in the hotel review feature in QloApps versions 1.7.0 and earlier allows remote unauthenticated attackers to achieve remote code execution...
PT-2026-1879
Name of the Vulnerable Software and Affected Versions QloApps versions 1.7.0 and earlier Description An unrestricted file upload issue exists in the hotel review feature. This allows remote, unauthenticated attackers to execute code on the system. The issue involves the ability to upload arbitrar...
CVE-2025-67325
Unrestricted file upload in the hotel review feature in QloApps versions 1.7.0 and earlier allows remote unauthenticated attackers to achieve remote code execution...
CVE-2025-67325
CVE-2025-67325 is an unrestricted file upload vulnerability in QloApps, affecting version 1.7.0 and earlier within the hotel review feature. The issue allows remote unauthenticated attackers to achieve remote code execution (RCE). Public advisories corroborate the RCE potential; evidence of a PoC...
CVE-2025-1074
A vulnerability, which was classified as problematic, was found in Webkul QloApps 1.6.1. Affected is the function logout of the file /en/?mylogout of the component URL Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been...
CVE-2025-1155
A vulnerability, which was classified as problematic, was found in Webkul QloApps 1.6.1. This affects an unknown part of the file /stores of the component Your Location Search. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. It is planned to remove...
Exploit for CVE-2025-67325
🚨 Unauthenticated Remote Code Execution RCE via File Upload...
EUVD-2025-1989
Malicious code in bioql PyPI...
EUVD-2023-40212
Malicious code in bioql PyPI...
EUVD-2025-30370
Malicious code in bioql PyPI...
EUVD-2025-4660
Malicious code in bioql PyPI...
EUVD-2025-2030
Malicious code in bioql PyPI...