Lucene search
QdpmQdpm9.2
3 matches found
CVE-2022-26180
qdPM 9.2 allows Cross-Site Request Forgery (CSRF) via the index.php/myAccount/update URI.
8.8CVSS8.8AI score0.00353EPSS
CVE-2023-45855
qdPM 9.2 allows Directory Traversal to list files and directories by navigating to the /uploads URI.
7.5CVSS7.5AI score0.81998EPSS
CVE-2023-45856
qdPM 9.2 allows remote code execution by using the Add Attachments feature of Edit Project to upload a .php file to the /uploads URI.
9.8CVSS9.7AI score0.06593EPSS