CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2021/09/09 3:15 p.m.•11 views

CVE-2020-19515

qdPM V9.1 is vulnerable to Cross Site Scripting XSS via qdPM\install\modules\databaseconfig.php...

6.1CVSS0.04532EPSS

Exploits1References1

Prion•added 2021/09/09 3:15 p.m.•13 views

Cross site scripting

qdPM V9.1 is vulnerable to Cross Site Scripting XSS via qdPM\install\modules\databaseconfig.php...

4.3CVSS5.9AI score0.04532EPSS

Exploits1References1Affected Software1

CVE•added 2021/09/09 2:37 p.m.•67 views

CVE-2020-19515

qdPM 9.1 is vulnerable to Cross-Site Scripting via qdPM\install\modules\database_config.php. The root cause is insufficient validation of user-supplied data in that configuration file, enabling injection of malicious scripts into pages viewed by users. Impact could include data theft, session hij...

6.1CVSS5.9AI score0.04532EPSS

Exploits1References1Affected Software1