Search vulnerabilities

Results 2

Export CSV
CVE-2010-1021

Cross-site scripting (XSS) vulnerability in the Typo3 Quixplorer (t3quixplorer) extension before 1.7.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0 · 4.3 Medium EPSS 1.1% KEV · Not listed
Vendors
Products
CVE-2011-5005

Unrestricted file upload vulnerability in QuiXplorer 2.3 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension using the upload action to index.php, then accessing it via a direct request to the file in an unspecified directory.

CVSS 2.0 · 7.5 High EPSS 3.7% KEV · Not listed