Questwork : Security Vulnerabilities, CVEs, Published In 2008
Cross-site scripting (XSS) vulnerability in main/main.php in QuestCMS allows remote attackers to inject arbitrary web script or HTML via the cx parameter.
Max CVSS
4.3
EPSS Score
0.22%
Published
2008-10-28
Updated
2017-09-29
Directory traversal vulnerability in main/main.php in QuestCMS allows remote attackers to read arbitrary local files via a .. (dot dot) in the theme parameter.
Max CVSS
5.0
EPSS Score
0.47%
Published
2008-10-28
Updated
2017-09-29
SQL injection vulnerability in main/main.php in QuestCMS allows remote attackers to execute arbitrary SQL commands via the obj parameter.
Max CVSS
7.5
EPSS Score
0.10%
Published
2008-10-28
Updated
2017-09-29
3 vulnerabilities found