Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: C97net Clear all filters
TI-2014-08436 CVE-2014-125138 · GHSA-78p8-fwwm-2xrr

Unrestricted file upload in C97net qEngine CMS and other products

Priority HIGH 73

C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 contain an unrestricted file upload vulnerability in administrative image fields.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00423 Published 2026-10-28 No fix listed CWE-434
TI-2014-08435 CVE-2014-125137 · GHSA-c4x8-8fmf-prcq

Local file inclusion in C97net qEngine CMS and related products

Priority MEDIUM 64

C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 contain a local file inclusion vulnerability in the run parameter of admin/task.php.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00718 Published 2026-10-28 No fix listed CWE-98
TI-2014-08434 CVE-2014-125136 · GHSA-hhvm-rp85-j9hh

Database backup exposure in C97net qEngine CMS and two other products

Priority HIGH 69

C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 contain an information disclosure vulnerability that exposes database backups in the web-accessible /admin/backup directory.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00412 Published 2026-10-28 No fix listed CWE-530