QCube Cross-Site-Scripting Detection

A reflected cross-site scripting vulnerability in qcubed all versions including 3.1.1 in profile.php via the stQuery-parameter allows unauthenticated attackers to steal sessions of authenticated users. !/usr/bin/env python3 -- coding: utf-8 -- """A reflected cross-site scripting vulnerability in...

CVE-2020-24912

A reflected cross-site scripting XSS vulnerability in qcubed all versions including 3.1.1 in profile.php via the stQuery-parameter allows unauthenticated attackers to steal sessions of authenticated users...

CVE-2020-24912

A reflected cross-site scripting XSS vulnerability in qcubed all versions including 3.1.1 in profile.php via the stQuery-parameter allows unauthenticated attackers to steal sessions of authenticated users...

PT-2021-11084

Name of the Vulnerable Software and Affected Versions: qcubed versions 3.1.1 and earlier Description: A reflected cross-site scripting XSS issue in profile.php via the stQuery-parameter allows unauthenticated attackers to steal sessions of authenticated users. Recommendations: For versions 3.1.1...

CVE-2020-24912: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability in qcubed all versions including 3.1.1 in profile.php via the stQuery-parameter allows unauthenticated attackers to steal sessions of authenticated users...