Read the docs

QCubed

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

QCubed records in CISA KEV

No QCubed vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Qcubed 3 records HIGH

Records

4 records

TI-2020-15238 CVE-2020-24913 · GHSA-8fj6-pc5r-347q

A SQL injection vulnerability in qcubed (all versions including 3.1.1) in profile.php via…

Priority HIGH 70

A SQL injection vulnerability in qcubed (all versions including 3.1.1) in profile.php via the strQuery parameter allows an unauthenticated attacker to access the database by injecting SQL code via a crafted POST request.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.40886 Published 2021-03-04 Fixed in 3.2 CWE-89
TI-2017-14767 CVE-2017-20288 · GHSA-x88m-7355-jxw8

Reflected cross-site scripting in QCubed installer step_2.php

Priority MEDIUM 56

QCubed 2.2.0 through 3.1.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the installation_path parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00256 Published 2026-10-22 No fix listed CWE-79
TI-2020-15239 CVE-2020-24914 · GHSA-7w3c-jgh7-cwjw

A PHP object injection bug in profile.php in qcubed (all versions including 3.1.1)…

Priority MEDIUM 50

A PHP object injection bug in profile.php in qcubed (all versions including 3.1.1) unserializes the untrusted data of the POST-variable "strProfileData" and allows an unauthenticated attacker to execute code via a crafte…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04978 Published 2021-03-04 Fixed in 3.2 CWE-502
Open these records in search →