Read the docs

QCubed

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

QCubed records in CISA KEV

No QCubed vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Qcubed 3 records HIGH

Records

3 records in Qcubed · all components

TI-2020-15238 CVE-2020-24913 · GHSA-8fj6-pc5r-347q

A SQL injection vulnerability in qcubed (all versions including 3.1.1) in profile.php via…

Priority HIGH 70

A SQL injection vulnerability in qcubed (all versions including 3.1.1) in profile.php via the strQuery parameter allows an unauthenticated attacker to access the database by injecting SQL code via a crafted POST request.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.40886 Published 2021-03-04 Fixed in 3.2 CWE-89
TI-2020-15239 CVE-2020-24914 · GHSA-7w3c-jgh7-cwjw

A PHP object injection bug in profile.php in qcubed (all versions including 3.1.1)…

Priority MEDIUM 50

A PHP object injection bug in profile.php in qcubed (all versions including 3.1.1) unserializes the untrusted data of the POST-variable "strProfileData" and allows an unauthenticated attacker to execute code via a crafte…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04978 Published 2021-03-04 Fixed in 3.2 CWE-502
Open these records in search →