Login Request a demo
GQ
Product
Gxlcms QY
by Gxlcms · last CVE Apr 8, 2018
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 4High 2Medium 0Low 0
Severity
All severities6Critical4High2Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Gxlcms QY to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-9851
7.5
2%
Apr 8
In Gxlcms QY v1.0.0713, Lib\Lib\Action\Admin\TplAction.class.php allows remote attackers to read any file via a modified pathname in an Admin-Tpl request, as demonstrated by use…
Affected: 1.0.0713
CVE-2018-9850
7.5
2%
Apr 8
In Gxlcms QY v1.0.0713, Lib\Lib\Action\Admin\DataAction.class.php allows remote attackers to delete any file via directory traversal sequences in the id parameter of an…
Affected: 1.0.0713
Showing 2