Approved changes feed: RSS · Atom

cpe:2.3:a:q-cms:qcms:3.0.1:*:*:*:*:*:*:*

part: a version: 3.0.1 update: *

VendorQ Cms (a6a4f326-80d8-5722-a6bd-f8fdf23bbd5c)
ProductQcms (b8147505-c92f-544f-8e0b-c22cfb94b32b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-10578 vulnerable 2026-06-08 05:16:35.319432 Details available
An arbitrary file read vulnerability exists in system/controller/backend/template.php in QCMS v3.0.1.
Published: 2020-03-14T19:30:40.000Z
Updated: 2024-08-04T11:06:10.046Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14978 vulnerable 2026-06-08 05:10:53.728016 Details available
An issue was discovered in QCMS 3.0.1. CSRF exists via the backend/user/admin/add.html URI.
Published: 2018-08-06T15:00:00.000Z
Updated: 2024-08-05T09:46:24.805Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14977 vulnerable 2026-06-08 05:10:53.727764 Details available
An issue was discovered in QCMS 3.0.1. upload/System/Controller/guest.php has XSS, as demonstrated by the name parameter, a different vulnerability than CVE-2018-8070.
Published: 2018-08-06T15:00:00.000Z
Updated: 2024-08-05T09:46:25.168Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14976 vulnerable 2026-06-08 05:10:53.727487 Details available
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/category.php has XSS.
Published: 2018-08-06T15:00:00.000Z
Updated: 2024-08-05T09:46:24.866Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14975 vulnerable 2026-06-08 05:10:53.727230 Details available
An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/album.php has XSS.
Published: 2018-08-06T15:00:00.000Z
Updated: 2024-08-05T09:46:24.904Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14974 vulnerable 2026-06-08 05:10:53.726868 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14973 vulnerable 2026-06-08 05:10:53.726468 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14972 vulnerable 2026-06-08 05:10:53.726222 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14971 vulnerable 2026-06-08 05:10:53.725968 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14970 vulnerable 2026-06-08 05:10:53.725608 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14969 vulnerable 2026-06-08 05:10:53.725240 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.