Export limit exceeded: 425871 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2008-4772

SQL injection vulnerability in main/main.php in QuestCMS allows remote attackers to execute arbitrary SQL commands via the obj parameter.

CVSS 2.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Questwork
Products
Questcms
CVE-2008-4773

Directory traversal vulnerability in main/main.php in QuestCMS allows remote attackers to read arbitrary local files via a .. (dot dot) in the theme parameter.

CVSS 2.0 · 5.0 Medium EPSS 2.7% KEV · Not listed
Vendors
Questwork
Products
Questcms
CVE-2008-4774

Cross-site scripting (XSS) vulnerability in main/main.php in QuestCMS allows remote attackers to inject arbitrary web script or HTML via the cx parameter.

CVSS 2.0 · 4.3 Medium EPSS 1.4% KEV · Not listed
Vendors
Questwork
Products
Questcms