Qloapps Security Vulnerabilities and Issues — Qloapps CVE List

Lucene search

WebkulQloapps

3 matches found

CVE•added 2024/07/25 7:15 p.m.•48 views

CVE-2024-40318

An arbitrary file upload vulnerability in Webkul Qloapps v1.6.0.0 allows attackers to execute arbitrary code via uploading a crafted file.

7.2CVSS7.8AI score0.07675EPSS

CVE•added 2023/06/23 4:15 p.m.•32 views

CVE-2023-36284

An unauthenticated Time-Based SQL injection found in Webkul QloApps 1.6.0 via GET parameter date_from, date_to, and id_product allows a remote attacker to bypass a web application's authentication and authorization mechanisms and retrieve the contents of an entire database.

7.5CVSS8.1AI score0.19392EPSS

CVE•added 2025/06/17 7:15 a.m.•18 views

CVE-2025-6173

A vulnerability classified as critical was found in Webkul QloApps 1.6.1. Affected by this vulnerability is an unknown functionality of the file /admin/ajax_products_list.php. The manipulation of the argument packItself leads to sql injection. The attack can be launched remotely. The exploit has be...

7.2CVSS7.6AI score0.0004EPSS