Approved changes feed: RSS · Atom
cpe:2.3:a:qool:qool_cms:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Qool (2e7fad70-910d-5723-a3eb-2fa0f3f90f00) |
|---|---|
| Product | Qool Cms (106268d7-3905-5697-b65a-744bb6a8d0fe) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-20006 |
vulnerable | 2026-06-08 05:03:57.771413 |
Qool CMS Multiple Persistent Cross-Site Scripting Vulnerabilities
HIGH (7.5)
Qool CMS contains multiple persistent cross-site scripting vulnerabilities in several administrative scripts where POST parameters are not properly sanitized before being stored and returned to users. Attackers can inject malicious JavaScript code through parameters like 'title', 'name', 'email', 'username', 'link', and 'task' in endpoints such as addnewtype, addnewdatafield, addmenu, addusergroup, addnewuserfield, adduser, addgeneraldata, and addcontentitem to execute arbitrary scripts in administrator browsers.
Published: 2026-03-15T18:34:10.910Z
Updated: 2026-03-16T14:20:18.616Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-20005 |
vulnerable | 2026-06-08 05:03:57.771035 |
Qool CMS 2.0 RC2 Cross-Site Request Forgery via adduser
MEDIUM (5.3)
Qool CMS 2.0 RC2 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions by tricking logged-in users into visiting malicious web pages. Attackers can forge POST requests to the /admin/adduser endpoint with parameters like username, password, email, and level to create root-level user accounts without user consent.
Published: 2026-03-15T18:34:09.977Z
Updated: 2026-03-16T14:20:18.785Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.