An arbitrary file read vulnerability exists in system/controller/backend/template.php in QCMS v3.0.1.
CVSS Score
7.5
EPSS Score
0.003
Published
2020-03-14
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/news.php has XSS.
CVSS Score
4.8
EPSS Score
0.002
Published
2018-08-06
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/album.php has XSS.
CVSS Score
4.8
EPSS Score
0.002
Published
2018-08-06
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/category.php has XSS.
CVSS Score
4.8
EPSS Score
0.002
Published
2018-08-06
An issue was discovered in QCMS 3.0.1. upload/System/Controller/guest.php has XSS, as demonstrated by the name parameter, a different vulnerability than CVE-2018-8070.
CVSS Score
6.1
EPSS Score
0.002
Published
2018-08-06
An issue was discovered in QCMS 3.0.1. CSRF exists via the backend/user/admin/add.html URI.
CVSS Score
8.8
EPSS Score
0.001
Published
2018-08-06
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/system.php has XSS.
CVSS Score
4.8
EPSS Score
0.002
Published
2018-08-06
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/slideshow.php has XSS.
CVSS Score
4.8
EPSS Score
0.002
Published
2018-08-06
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/user.php has XSS.
CVSS Score
4.8
EPSS Score
0.002
Published
2018-08-06
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/down.php has XSS.
CVSS Score
4.8
EPSS Score
0.002
Published
2018-08-06
Page 1