Questwork - vulnerabilities (CVEs)

3 CVEs in 1 products, 0 in the last 30 days, newest from 2008-10-28.

Products

• Questcms - 3 CVEs

Newest CVEs of Questwork

• CVE-2008-4773 - CVSS 5 (medium), 2008-10-28: Directory traversal vulnerability in main/main.php in QuestCMS allows remote attackers to read arbitrary local files via a .. (dot dot) in the theme parameter.
• CVE-2008-4772 - CVSS 7.5 (high), 2008-10-28: SQL injection vulnerability in main/main.php in QuestCMS allows remote attackers to execute arbitrary SQL commands via the obj parameter.
• CVE-2008-4774 - CVSS 4.3 (medium), 2008-10-28: Cross-site scripting (XSS) vulnerability in main/main.php in QuestCMS allows remote attackers to inject arbitrary web script or HTML via the cx parameter.