PRODUCT PROFILE

qcubed

暂无产品描述。

关联漏洞

共找到 2 条公开漏洞记录

中危CVE-2020-249122021/03/04

QCube Cross-Site-Scripting

A reflected cross-site scripting vulnerability in qcubed (all versions including 3.1.1) in profile.php via the stQuery-parameter allows unauthenticated attackers to steal sessions of authenticated users.

qcubedPoC 已收录

CVSS6.1EPSS 21.0%

高危2017/03/24

Qcubed - Cross-Site Scripting

Qcubed contains a cross-site scripting vulnerability which allows a remote attacker to inject arbitrary JavaScript via the /assets/php/_devtools/installer/step_2.php endpoint and the installation_path parameter.

qcubedPoC 已收录

CVSS7.2