EUVD-2018-1355

Malware in sbrugna...

EUVD-2018-1354

Malware in sbrugna...

EUVD-2018-1353

Malware in sbrugna...

QQQ SYSTEMS cross-site scripting vulnerability

QQQ SYSTEMS is a set of CGI scripts for creating quiz pages. A cross-site scripting vulnerability exists in QQQ SYSTEMS version 2.24. A remote attacker can exploit this vulnerability to inject arbitrary web scripts...

QQQ SYSTEMS cross-site scripting vulnerability (CNVD-2018-07698)

QQQ SYSTEMS is a set of CGI scripts for creating quiz pages. A cross-site scripting vulnerability exists in QQQ SYSTEMS version 2.24. A remote attacker can exploit this vulnerability to inject arbitrary web scripts via the quiz.cgi file...

QQQ SYSTEMS OS Command Injection Vulnerability

QQQ SYSTEMS is a set of CGI scripts for creating quiz pages. A security vulnerability exists in QQQ SYSTEMS version 2.24. An attacker can exploit this vulnerability to execute arbitrary commands...

CVE-2018-0538

Cross-site scripting vulnerability in QQQ SYSTEMS ver2.24 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in QQQ SYSTEMS ver2.24 allows an attacker to inject arbitrary web script or HTML via quiz.cgi...

Cross site scripting

Cross-site scripting vulnerability in QQQ SYSTEMS ver2.24 allows an attacker to inject arbitrary web script or HTML via quizop.cgi...

CVE-2018-0536

Cross-site scripting vulnerability in QQQ SYSTEMS ver2.24 allows an attacker to inject arbitrary web script or HTML via quiz.cgi...

CVE-2018-0538

Cross-site scripting vulnerability in QQQ SYSTEMS ver2.24 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0538

The CVE-2018-0538 entry concerns QQQ SYSTEMS ver2.24, a CGI-based quiz-system that contains a stored cross-site scripting vulnerability (CWE-79). Affected component is the web UI handling administrative/arbitrary input that can be crafted to execute arbitrary scripts in the victim’s browser, enab...

CVE-2018-0537

CVE-2018-0537 describes a cross-site scripting (CWE-79) vulnerability in QQQ SYSTEMS ver2.24. The flaw resides in the quiz_op.cgi CGI script, allowing an attacker-controlled script or HTML to be injected and executed in a victim’s browser when visiting a page that uses the product. Reported impac...

CVE-2018-0537

Cross-site scripting vulnerability in QQQ SYSTEMS ver2.24 allows an attacker to inject arbitrary web script or HTML via quizop.cgi...

CVE-2018-0538

Cross-site scripting vulnerability in QQQ SYSTEMS ver2.24 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0536

QQQ SYSTEMS (ver2.24) exposes a cross-site scripting vulnerability in quiz.cgi (CWE-79). The CGI-based quiz page creator allows an attacker to inject arbitrary web scripts via quiz.cgi, potentially affecting users who load malicious pages. Reported in multiple sources (CNVD/NVD/JVN) with impact d...

CVE-2018-0536

Cross-site scripting vulnerability in QQQ SYSTEMS ver2.24 allows an attacker to inject arbitrary web script or HTML via quiz.cgi...

CVE-2018-0539

The CVE-2018-0539 entry concerns QQQ SYSTEMS version 2.24, a Perl CGI-based quiz tool, which contains an OS command injection vulnerability (CWE-78). Connected sources confirm that an attacker can execute arbitrary commands on the server with the web server’s privileges, due to the vulnerable com...

QQQ SYSTEMS vulnerable to cross-site scripting

Overview QQQ SYSTEMS provided by Gundam Cult QQQ is a CGI script to create quiz pages. QQQ SYSTEMS contains a stored cross-site scripting vulnerability CWE-79. When an administrative user of the software accesses a malicious page created by an attacker, an arbitrary script may be executed. Note...

QQQ SYSTEMS vulnerable to cross-site scripting

Overview QQQ SYSTEMS provided by Gundam Cult QQQ is a CGI script to create quiz pages. quizop.cgi of QQQ SYSTEMS contains a cross-site scripting vulnerability CWE-79. When a user accesses a malicious page and is redirected to a page created with the product, an arbitrary script may be executed on...