CVE-2018-0536

Cross-site scripting vulnerability in QQQ SYSTEMS ver2.24 allows an attacker to inject arbitrary web script or HTML via quiz.cgi...

CVE-2018-0537

Cross-site scripting vulnerability in QQQ SYSTEMS ver2.24 allows an attacker to inject arbitrary web script or HTML via quizop.cgi...

Cross site scripting

Cross-site scripting vulnerability in QQQ SYSTEMS ver2.24 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0538

The CVE-2018-0538 entry concerns QQQ SYSTEMS ver2.24, a CGI-based quiz-system that contains a stored cross-site scripting vulnerability (CWE-79). Affected component is the web UI handling administrative/arbitrary input that can be crafted to execute arbitrary scripts in the victim’s browser, enab...