PatchTheCVEqcms vulnerabilities
Recent CVEs affecting qcms products. 2 tracked.
qcms has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-03-12. Highest priority: CVE-2018-8070 (score 35/100).
- CVE-2018-8070 MEDIUM 5.4 DOWNGRADE QCMS version 3.0 has XSS via the title parameter to the /guest/index.html URI.
- CVE-2018-8069 MEDIUM 5.4 DOWNGRADE QCMS version 3.0 has XSS via the webname parameter to the /backend/system.html URI.
FAQ
How do I fix qcms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is qcms being exploited right now?
None of the tracked qcms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which qcms CVE should I patch first?
CVE-2018-8070 currently ranks highest (35/100): QCMS version 3.0 has XSS via the title parameter to the /guest/index.html URI..