Qsoft

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Qsoft records in CISA KEV

No Qsoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

K-links 2 records LOW

Records

2 records in K-links · all components

TI-2008-03427 CVE-2008-3580 · GHSA-wq3f-8fvg-8rw6

Multiple SQL injection vulnerabilities in Qsoft K-Links allow remote attackers to execute…

LOW 35

Multiple SQL injection vulnerabilities in Qsoft K-Links allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to visit.php, or the PATH_INFO to the default URI under (2) report/, (3) addreview…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01196 Published 2008-08-10 No fix listed CWE-89

TI-2008-03428 CVE-2008-3581 · GHSA-53fw-5wjp-mrqx

Cross-site scripting (XSS) vulnerability in index.php in Qsoft K-Links allows remote…

LOW 23

Cross-site scripting (XSS) vulnerability in index.php in Qsoft K-Links allows remote attackers to inject arbitrary web script or HTML via the login_message parameter in a login action.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01571 Published 2008-08-10 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0