Q-Cms / Qcms
14 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-94110 | QCMS Content Detail Controllers.php self_Tmp sql injection | MEDIUM | 6.9 | Sep 21, 2026 |
| CVE-2025-50233 | A vulnerability in QCMS version 6.0.5 allows authenticated users to read arbitrary files from the server due to insufficient validation of the "Name" parameter… | MEDIUM | 6.5 | Aug 6, 2025 |
| CVE-2020-10578 | An arbitrary file read vulnerability exists in system/controller/backend/template.php in QCMS v3.0.1. | HIGH | 7.5 | Mar 14, 2020 |
| CVE-2018-14978 | An issue was discovered in QCMS 3.0.1. CSRF exists via the backend/user/admin/add.html URI. | HIGH | 8.8 | Aug 6, 2018 |
| CVE-2018-14977 | An issue was discovered in QCMS 3.0.1. upload/System/Controller/guest.php has XSS, as demonstrated by the name parameter, a different vulnerability than CVE-20… | MEDIUM | 6.1 | Aug 6, 2018 |
| CVE-2018-14976 | An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/category.php has XSS. | MEDIUM | 4.8 | Aug 6, 2018 |
| CVE-2018-14975 | An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/album.php has XSS. | MEDIUM | 4.8 | Aug 6, 2018 |
| CVE-2018-14974 | An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/news.php has XSS. | MEDIUM | 4.8 | Aug 6, 2018 |
| CVE-2018-14973 | An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/product.php has XSS. | MEDIUM | 4.8 | Aug 6, 2018 |
| CVE-2018-14972 | An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/down.php has XSS. | MEDIUM | 4.8 | Aug 6, 2018 |
| CVE-2018-14971 | An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/user.php has XSS. | MEDIUM | 4.8 | Aug 6, 2018 |
| CVE-2018-14970 | An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/slideshow.php has XSS. | MEDIUM | 4.8 | Aug 6, 2018 |
| CVE-2018-14969 | An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/system.php has XSS. | MEDIUM | 4.8 | Aug 6, 2018 |
| CVE-2018-8070 | QCMS version 3.0 has XSS via the title parameter to the /guest/index.html URI. | MEDIUM | 5.4 | Mar 12, 2018 |
| CVE-2018-8069 | QCMS version 3.0 has XSS via the webname parameter to the /backend/system.html URI. | MEDIUM | 5.4 | Mar 12, 2018 |
Showing 1 to 14 of 14 CVEs