Arbitrary file deletion

An arbitrary file read vulnerability exists in system/controller/backend/template.php in QCMS v3.0.1...

PT-2020-12218

Name of the Vulnerable Software and Affected Versions QCMS version 3.0.1 Description An arbitrary file read issue exists in the system/controller/backend/template.php file. Recommendations For QCMS version 3.0.1, update to a version that fixes this issue, as the current version allows for arbitra...

CVE-2018-14973: Improper Neutralization of Input During Web Page Generation

An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/product.php has XSS...

CVE-2018-14969: Improper Neutralization of Input During Web Page Generation

An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/system.php has XSS...

PT-2018-12850

Name of the Vulnerable Software and Affected Versions QCMS version 3.0.1 Description An issue was discovered in the upload/System/Controller/backend/product.php file, which has a Cross-Site Scripting XSS issue. Recommendations For QCMS version 3.0.1, consider restricting access to the...

PT-2018-12851

Name of the Vulnerable Software and Affected Versions QCMS version 3.0.1 Description An issue was discovered in the upload/System/Controller/backend/news.php file, which has a Cross-Site Scripting XSS issue. Recommendations For QCMS version 3.0.1, consider restricting access to the...

PT-2018-12853

Name of the Vulnerable Software and Affected Versions QCMS version 3.0.1 Description An issue was discovered in the upload/System/Controller/backend/category.php file, which has a Cross-Site Scripting XSS issue. Recommendations For QCMS version 3.0.1, consider restricting access to the vulnerable...

PT-2018-12846

Name of the Vulnerable Software and Affected Versions QCMS version 3.0.1 Description An issue was discovered in the upload/System/Controller/backend/system.php file, which has a cross-site scripting XSS issue. Recommendations For QCMS version 3.0.1, update to a newer version that contains a fix f...

PT-2018-12848

Name of the Vulnerable Software and Affected Versions QCMS version 3.0.1 Description An issue was discovered in the upload/System/Controller/backend/user.php file, which has a Cross-Site Scripting XSS issue. Recommendations For QCMS version 3.0.1, consider disabling access to the...