Questwork Questcms : Security vulnerabilities, CVEs

Copy

CVE-2008-4774

Cross-site scripting (XSS) vulnerability in main/main.php in QuestCMS allows remote attackers to inject arbitrary web script or HTML via the cx parameter.

Max CVSS

4.3

EPSS Score

0.22%

Published

2008-10-28

Updated

2017-09-29

CVE-2008-4773

Directory traversal vulnerability in main/main.php in QuestCMS allows remote attackers to read arbitrary local files via a .. (dot dot) in the theme parameter.

Max CVSS

5.0

EPSS Score

0.47%

Published

2008-10-28

Updated

2017-09-29

CVE-2008-4772

SQL injection vulnerability in main/main.php in QuestCMS allows remote attackers to execute arbitrary SQL commands via the obj parameter.

Max CVSS

7.5

EPSS Score

0.10%

Published

2008-10-28

Updated

2017-09-29

3 vulnerabilities found

This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!