Questcms Security Vulnerabilities and Issues — Questcms CVE List

Lucene search

QuestworkQuestcms

3 matches found

CVE•added 2008/10/28 7:46 p.m.•38 views

CVE-2008-4772

SQL injection vulnerability in main/main.php in QuestCMS allows remote attackers to execute arbitrary SQL commands via the obj parameter.

7.5CVSS8.4AI score0.00144EPSS

CVE•added 2008/10/28 7:46 p.m.•37 views

CVE-2008-4773

Directory traversal vulnerability in main/main.php in QuestCMS allows remote attackers to read arbitrary local files via a .. (dot dot) in the theme parameter.

5CVSS6.5AI score0.01666EPSS

CVE•added 2008/10/28 7:46 p.m.•34 views

CVE-2008-4774

Cross-site scripting (XSS) vulnerability in main/main.php in QuestCMS allows remote attackers to inject arbitrary web script or HTML via the cx parameter.

4.3CVSS5.7AI score0.01152EPSS