7 matches found
CVE-2020-10578
An arbitrary file read vulnerability exists in system/controller/backend/template.php in QCMS v3.0.1...
EUVD-2018-6854
Malware in sbrugna...
EUVD-2018-6860
Malware in sbrugna...
EUVD-2018-6851
Malware in sbrugna...
CVE-2025-50233
A vulnerability in QCMS version 6.0.5 allows authenticated users to read arbitrary files from the server due to insufficient validation of the "Name" parameter in the backend template editor. By manipulating the parameter, attackers can perform directory traversal and access sensitive files outsi...
CVE-2025-50233
A vulnerability in QCMS version 6.0.5 allows authenticated users to read arbitrary files from the server due to insufficient validation of the "Name" parameter in the backend template editor. By manipulating the parameter, attackers can perform directory traversal and access sensitive files outsi...
CVE-2025-50233
QCMS version 6.0.5 is vulnerable to a directory traversal flaw due to insufficient validation of the "Name" parameter in the backend template editor. Authenticated users can manipulate this parameter to read arbitrary files from the server outside the intended template directory. This could resul...