Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: QCubed Clear all filters
TI-2017-14767 CVE-2017-20288 · GHSA-x88m-7355-jxw8

Reflected cross-site scripting in QCubed installer step_2.php

Priority MEDIUM 56

QCubed 2.2.0 through 3.1.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the installation_path parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00256 Published 2026-10-22 No fix listed CWE-79
TI-2020-15239 CVE-2020-24914 · GHSA-7w3c-jgh7-cwjw

A PHP object injection bug in profile.php in qcubed (all versions including 3.1.1)…

Priority MEDIUM 50

A PHP object injection bug in profile.php in qcubed (all versions including 3.1.1) unserializes the untrusted data of the POST-variable "strProfileData" and allows an unauthenticated attacker to execute code via a crafte…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04978 Published 2021-03-04 Fixed in 3.2 CWE-502
TI-2020-15238 CVE-2020-24913 · GHSA-8fj6-pc5r-347q

A SQL injection vulnerability in qcubed (all versions including 3.1.1) in profile.php via…

Priority HIGH 70

A SQL injection vulnerability in qcubed (all versions including 3.1.1) in profile.php via the strQuery parameter allows an unauthenticated attacker to access the database by injecting SQL code via a crafted POST request.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.40886 Published 2021-03-04 Fixed in 3.2 CWE-89