Priority LOW 29
A vulnerability in QCMS version 6.0.5 allows authenticated users to read arbitrary files from the server due to insufficient validation of the "Name" parameter in the backend template editor.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00469 · Published 2025-08-06 · No fix listed CWE-20
Priority LOW 35
An arbitrary file read vulnerability exists in system/controller/backend/template.php in QCMS v3.0.1.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01152 · Published 2020-03-14 · No fix listed
Priority LOW 39
An issue was discovered in QCMS 3.0.1.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.00494 · Published 2018-08-06 · No fix listed CWE-352
Priority LOW 28
An issue was discovered in QCMS 3.0.1.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00675 · Published 2018-08-06 · No fix listed CWE-79
Priority LOW 23
An issue was discovered in QCMS 3.0.1.
CVSS 3.0MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00534 · Published 2018-08-06 · No fix listed CWE-79
Priority LOW 23
An issue was discovered in QCMS 3.0.1.
CVSS 3.0MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00534 · Published 2018-08-06 · No fix listed CWE-79
Priority LOW 23
An issue was discovered in QCMS 3.0.1.
CVSS 3.0MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00534 · Published 2018-08-06 · No fix listed CWE-79
Priority LOW 23
An issue was discovered in QCMS 3.0.1.
CVSS 3.0MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00534 · Published 2018-08-06 · No fix listed CWE-79
Priority LOW 23
An issue was discovered in QCMS 3.0.1.
CVSS 3.0MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00534 · Published 2018-08-06 · No fix listed CWE-79
Priority LOW 23
An issue was discovered in QCMS 3.0.1.
CVSS 3.0MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00534 · Published 2018-08-06 · No fix listed CWE-79
Priority LOW 23
An issue was discovered in QCMS 3.0.1.
CVSS 3.0MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00534 · Published 2018-08-06 · No fix listed CWE-79
Priority LOW 23
An issue was discovered in QCMS 3.0.1.
CVSS 3.0MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00534 · Published 2018-08-06 · No fix listed CWE-79