5 matches found
CVE-2026-94110
A security vulnerability has been detected in QCMS up to 6.0.6. This issue affects the function selfTmp in the library Lib/Config/Controllers.php of the component Content Detail Page. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit...
EUVD-2026-83822
A security vulnerability has been detected in QCMS up to 6.0.6. This issue affects the function selfTmp in the library Lib/Config/Controllers.php of the component Content Detail Page. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit...
CVE-2026-94110 QCMS Content Detail Controllers.php self_Tmp sql injection
A security vulnerability has been detected in QCMS up to 6.0.6. This issue affects the function selfTmp in the library Lib/Config/Controllers.php of the component Content Detail Page. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit...
CVE-2026-94110 QCMS Content Detail Controllers.php self_Tmp sql injection
A security vulnerability has been detected in QCMS up to 6.0.6. This issue affects the function selfTmp in the library Lib/Config/Controllers.php of the component Content Detail Page. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit...
CVE-2026-94110
QCMS up to 6.0.6 is vulnerable to a remote SQL injection in the self_Tmp function of Lib/Config/Controllers.php (Content Detail Page component). The root cause is unsanitized use of the ID argument. A publicly disclosed proof-of-concept exploit is available. Notably, the router parses raw REQUEST...