PT-2020-12218

Name of the Vulnerable Software and Affected Versions QCMS version 3.0.1 Description An arbitrary file read issue exists in the system/controller/backend/template.php file. Recommendations For QCMS version 3.0.1, update to a version that fixes this issue, as the current version allows for arbitra...

The vulnerability of the update mechanism for microprogramming software on Supermicro BMC controllers allows a hacker to execute arbitrary code.

The vulnerability of Supermicro microcontroller microprogramming software arises from insufficient verification of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by replacing the uploaded update...

CVE-2018-14969

An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/system.php has XSS...

CVE-2018-14972

An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/down.php has XSS...

PT-2018-12850

Name of the Vulnerable Software and Affected Versions QCMS version 3.0.1 Description An issue was discovered in the upload/System/Controller/backend/product.php file, which has a Cross-Site Scripting XSS issue. Recommendations For QCMS version 3.0.1, consider restricting access to the...

CVE-2018-14969: Improper Neutralization of Input During Web Page Generation

An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/system.php has XSS...

PT-2018-12846

Name of the Vulnerable Software and Affected Versions QCMS version 3.0.1 Description An issue was discovered in the upload/System/Controller/backend/system.php file, which has a cross-site scripting XSS issue. Recommendations For QCMS version 3.0.1, update to a newer version that contains a fix f...

PT-2018-12854

Name of the Vulnerable Software and Affected Versions QCMS version 3.0.1 Description An issue was discovered in the upload/System/Controller/guest.php file, which has a cross-site scripting XSS vulnerability. This is demonstrated by the name parameter. Recommendations For QCMS version 3.0.1,...

PT-2018-12853

Name of the Vulnerable Software and Affected Versions QCMS version 3.0.1 Description An issue was discovered in the upload/System/Controller/backend/category.php file, which has a Cross-Site Scripting XSS issue. Recommendations For QCMS version 3.0.1, consider restricting access to the vulnerable...

PT-2018-12851

Name of the Vulnerable Software and Affected Versions QCMS version 3.0.1 Description An issue was discovered in the upload/System/Controller/backend/news.php file, which has a Cross-Site Scripting XSS issue. Recommendations For QCMS version 3.0.1, consider restricting access to the...

PT-2018-12848

Name of the Vulnerable Software and Affected Versions QCMS version 3.0.1 Description An issue was discovered in the upload/System/Controller/backend/user.php file, which has a Cross-Site Scripting XSS issue. Recommendations For QCMS version 3.0.1, consider disabling access to the...

CVE-2018-14973: Improper Neutralization of Input During Web Page Generation

An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/product.php has XSS...

CVE-2014-2716

Ekahau B4 staff badge tag 5.7 with firmware 1.4.52, Real-Time Location System RTLS Controller 6.0.5-FINAL, and Activator 3 reuses the RC4 cipher stream, which makes it easier for remote attackers to obtain plaintext messages via an XOR operation on two ciphertexts...

CVE-2014-9343: Undefined Security Weakness

Open redirect vulnerability in modules/system/controller/selectlanguage.class.php in Snowfox CMS 1.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the rd parameter in a submit action to snowfox/...

Code injection

Sun ScApp firmware 5.18.x, 5.19.x, and 5.20.0 through 5.20.10 on Sun Fire and Netra platforms allows remote attackers to access the System Controller SC, the system console, and possibly the host OS, and cause a denial of service shutdown or reboot, via spoofed IP packets...

CVE-2008-5685: Undefined Security Weakness

Sun ScApp firmware 5.18.x, 5.19.x, and 5.20.0 through 5.20.10 on Sun Fire and Netra platforms allows remote attackers to access the System Controller SC, the system console, and possibly the host OS, and cause a denial of service shutdown or reboot, via spoofed IP packets...