CVE-2008-4772

CVE-2008-4772 describes an SQL injection vulnerability in QuestCMS, specifically in the file main/main.php where the parameter obj can be manipulated to execute arbitrary SQL commands by remote attackers. The NVD entry assigns a Base Score of 7.5 (High) with network access and no authentication r...

CVE-2008-4773

CVE-2008-4773 describes a directory traversal vulnerability in QuestCMS, specifically in the file main/main.php, where an attacker can read arbitrary local files by manipulating the theme parameter with "..". Public sources (NVD/CVELIST/PRION) consistently identify QuestCMS as affected and confir...

CVE-2008-4774

CVE-2008-4774 is a cross-site scripting (XSS) vulnerability in QuestCMS, exposed in main/main.php via the cx parameter. The issue allows remote attackers to inject arbitrary web script or HTML. NVD lists a MEDIUM severity (CVSS v2 base score 4.3) with network attack vector, no authentication, and...