Q-Cms Qcms
12 CVEs affecting Q-Cms Qcms. Latest disclosed: 2025-08-06. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-14978 | High | 8.8 | 2018-08-06 | An issue was discovered in QCMS 3.0.1. CSRF exists via the backend/user/admin/add.html URI. |
CVE-2020-10578 | High | 7.5 | 2020-03-14 | An arbitrary file read vulnerability exists in system/controller/backend/template.php in QCMS v3.0.1. |
CVE-2025-50233 | Medium | 6.5 | 2025-08-06 | A vulnerability in QCMS version 6.0.5 allows authenticated users to read arbitrary files from the server due to insufficient validation of the "Name" parameter… |
CVE-2018-14977 | Medium | 6.1 | 2018-08-06 | An issue was discovered in QCMS 3.0.1. upload/System/Controller/guest.php has XSS, as demonstrated by the name parameter, a different vulnerability than CVE-20… |
CVE-2018-14976 | Medium | 4.8 | 2018-08-06 | An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/category.php has XSS. |
CVE-2018-14975 | Medium | 4.8 | 2018-08-06 | An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/album.php has XSS. |
CVE-2018-14974 | Medium | 4.8 | 2018-08-06 | An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/news.php has XSS. |
CVE-2018-14973 | Medium | 4.8 | 2018-08-06 | An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/product.php has XSS. |
CVE-2018-14972 | Medium | 4.8 | 2018-08-06 | An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/down.php has XSS. |
CVE-2018-14971 | Medium | 4.8 | 2018-08-06 | An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/user.php has XSS. |
CVE-2018-14970 | Medium | 4.8 | 2018-08-06 | An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/slideshow.php has XSS. |
CVE-2018-14969 | Medium | 4.8 | 2018-08-06 | An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/system.php has XSS. |