Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 9:53 a.m.•18 views

CVE-2020-10578

An arbitrary file read vulnerability exists in system/controller/backend/template.php in QCMS v3.0.1...

7.5CVSS7.3AI score0.01152EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2018-6854

Malware in sbrugna...

4.8CVSS5.1AI score0.00534EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2018-6860

Malware in sbrugna...

8.8CVSS8.8AI score0.00494EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2018-6851

Malware in sbrugna...

4.8CVSS5.1AI score0.00534EPSS
SaveExploits1References2
NVD
NVD
•added 2025/08/06 3:15 p.m.•14 views

CVE-2025-50233

A vulnerability in QCMS version 6.0.5 allows authenticated users to read arbitrary files from the server due to insufficient validation of the "Name" parameter in the backend template editor. By manipulating the parameter, attackers can perform directory traversal and access sensitive files outsi...

6.5CVSS0.00472EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/08/06 12:00 a.m.•8 views

CVE-2025-50233

A vulnerability in QCMS version 6.0.5 allows authenticated users to read arbitrary files from the server due to insufficient validation of the "Name" parameter in the backend template editor. By manipulating the parameter, attackers can perform directory traversal and access sensitive files outsi...

6.4AI score0.00472EPSS
SaveExploits1References2
CVE
CVE
•added 2025/08/06 12:00 a.m.•39 views

CVE-2025-50233

QCMS version 6.0.5 is vulnerable to a directory traversal flaw due to insufficient validation of the "Name" parameter in the backend template editor. Authenticated users can manipulate this parameter to read arbitrary files from the server outside the intended template directory. This could resul...

6.5CVSS6.4AI score0.00472EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder