CVE-2018-14974

Description

References

• AvaterXXX/QCMS · Exploit

qcms 的其他漏洞

• CVE-2025-50233中危 6.5A vulnerability in QCMS version 6.0.5 allows authenticated users to read arbitrary files from the server due to insufficient validation of t…
• CVE-2020-10578高危 7.5An arbitrary file read vulnerability exists in system/controller/backend/template.php in QCMS v3.0.1.
• CVE-2018-14978高危 8.8An issue was discovered in QCMS 3.0.1. CSRF exists via the backend/user/admin/add.html URI.
• CVE-2018-14977中危 6.1An issue was discovered in QCMS 3.0.1. upload/System/Controller/guest.php has XSS, as demonstrated by the name parameter, a different vulner…
• CVE-2018-14976中危 4.8An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/category.php has XSS.