Security Vulnerabilities - CVEs Published In August 2018
zzcms 8.3 has CSRF via the admin/adminadd.php?action=add URI.
CVSS Score
8.8
EPSS Score
0.001
Published
2018-08-06
An issue was discovered in EMLsoft 5.4.5. XSS exists via the eml/upload/eml/?action=address&do=edit page.
CVSS Score
5.4
EPSS Score
0.002
Published
2018-08-06
An issue was discovered in EMLsoft 5.4.5. The eml/upload/eml/?action=address&do=add page allows CSRF.
CVSS Score
8.8
EPSS Score
0.001
Published
2018-08-06
An issue was discovered in EMLsoft 5.4.5. The eml/upload/eml/?action=user&do=add page allows CSRF.
CVSS Score
8.8
EPSS Score
0.001
Published
2018-08-06
An issue was discovered in EMLsoft 5.4.5. upload\eml\action\action.user.php has SQL Injection via the numPerPage parameter.
CVSS Score
8.8
EPSS Score
0.002
Published
2018-08-06
An issue was discovered in EMLsoft 5.4.5. upload\eml\action\action.address.php has SQL Injection via the numPerPage parameter.
CVSS Score
9.8
EPSS Score
0.003
Published
2018-08-06
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/system.php has XSS.
CVSS Score
4.8
EPSS Score
0.002
Published
2018-08-06
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/slideshow.php has XSS.
CVSS Score
4.8
EPSS Score
0.002
Published
2018-08-06
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/user.php has XSS.
CVSS Score
4.8
EPSS Score
0.002
Published
2018-08-06
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/down.php has XSS.
CVSS Score
4.8
EPSS Score
0.002
Published
2018-08-06