CVE Browser

Page 1

CVE-2008-4774 MEDIUM

Cross-site scripting (XSS) vulnerability in main/main.php in QuestCMS allows remote attackers to inject arbitrary web script or HTML via the cx parameter.

CVSS 4.3 EPSS 1.44% Oct 28, 2008

CVE-2008-4773 MEDIUM

Directory traversal vulnerability in main/main.php in QuestCMS allows remote attackers to read arbitrary local files via a .. (dot dot) in the theme parameter.

CVSS 5.0 EPSS 2.67% Oct 28, 2008

CVE-2008-4772 HIGH

SQL injection vulnerability in main/main.php in QuestCMS allows remote attackers to execute arbitrary SQL commands via the obj parameter.

CVSS 7.5 EPSS 0.97% Oct 28, 2008

CVE ID	Description	Severity	CVSS	EPSS	Published
CVE-2008-4774	Cross-site scripting (XSS) vulnerability in main/main.php in QuestCMS allows remote attackers to inject arbitrary web script or HTML via the cx parameter.	MEDIUM	4.3	1.44%	Oct 28, 2008
CVE-2008-4773	Directory traversal vulnerability in main/main.php in QuestCMS allows remote attackers to read arbitrary local files via a .. (dot dot) in the theme parameter.	MEDIUM	5.0	2.67%	Oct 28, 2008
CVE-2008-4772	SQL injection vulnerability in main/main.php in QuestCMS allows remote attackers to execute arbitrary SQL commands via the obj parameter.	HIGH	7.5	0.97%	Oct 28, 2008

Rows per page

Showing 1 to 3 CVEs · page 1