Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2014-8266

Multiple cross-site scripting (XSS) vulnerabilities in the note-creation page in QPR Portal 2014.1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) title or (2) body field.

CVSS 2.0 · 4.3 Medium EPSS 1.7% KEV · Not listed
Vendors
Qpr
Products
Portal
CVE-2014-8267

Cross-site scripting (XSS) vulnerability in QPR Portal 2014.1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the RID parameter.

CVSS 2.0 · 4.3 Medium EPSS 1.1% KEV · Not listed
Vendors
Qpr
Products
Portal
CVE-2014-8268

QPR Portal before 2012.2.1 allows remote attackers to modify or delete notes via a direct request.

CVSS 2.0 · 6.4 Medium EPSS 1.3% KEV · Not listed
Vendors
Qpr
Products
Portal