Vendors / Qualitor Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 1
Exploited now Qualitor records in CISA KEV No Qualitor vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
Qualitor up to 8.24 is vulnerable to Remote Code Execution (RCE) via Arbitrary File Upload in checkAcesso.php.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.46287 · Published 2024-09-09 · No fix listed CWE-434
Priority HIGH 82
Qualitor through 8.20 allows remote attackers to execute arbitrary code via PHP code in the html/ad/adpesquisasql/request/processVariavel.php gridValoresPopHidden parameter.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.16486 · Published 2023-11-06 · No fix listed CWE-77
Priority MEDIUM 53
Qualitor v8.24 was discovered to contain a remote code execution (RCE) vulnerability via the gridValoresPopHidden parameter.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02304 · Published 2024-10-31 · No fix listed CWE-94
Priority MEDIUM 45
Qualitor v8.24 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /request/viewValidacao.php.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.03907 · Published 2024-10-31 · No fix listed CWE-918
Priority LOW 39
A vulnerability was found in Qualitor 8.20/8.24.
CVSS 4.0 MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.0269 · Published 2025-05-25 · Fixed in 8.20.56, 8.24.31 CWE-74
Priority LOW 23
A security vulnerability has been detected in Qualitor up to 8.24.73.
CVSS 4.0 MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00254 · Published 2025-12-12 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
3 1 2 0 0
THREATIST.IORead the docs