Login Request a demo
GQ
Product
Gxlcms QY
by Gxlcms · last CVE Apr 8, 2018
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 4High 2Medium 0Low 0
Severity
All severities6Critical4High2Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Gxlcms QY to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-9852
9.8
1%
Apr 8
In Gxlcms QY v1.0.0713, Lib\Lib\Action\Home\HitsAction.class.php allows remote attackers to read data from a database by embedding a FROM clause in a query string within a…
Affected: 1.0.0713
CVE-2018-9848
9.8
2%
Apr 7
In Gxlcms QY v1.0.0713, the upload function in Lib\Lib\Action\Admin\UploadAction.class.php allows remote attackers to execute arbitrary PHP code by first using an…
Affected: 1.0.0713
CVE-2018-9847
9.8
2%
Apr 7
In Gxlcms QY v1.0.0713, the update function in Lib\Lib\Action\Admin\TplAction.class.php allows remote attackers to execute arbitrary PHP code by placing this code into a template
Affected: 1.0.0713
CVE-2018-9247
9.8
2%
Apr 4
The upsql function in \Lib\Lib\Action\Admin\DataAction.class.php in Gxlcms QY v1.0.0713 allows remote attackers to execute arbitrary SQL statements via the sql parameter
Affected: 1.0.0713
Showing 4