CVE-2024-58308

all versions

Quick.CMS 6.7 contains a SQL injection vulnerability that allows unauthenticated attackers to bypass login authentication by manip

9.8CRITICAL

CVE-2025-9982

all versions

A vulnerability exists in QuickCMS version 6.8 where sensitive admin credentials are hardcoded in a configuration file and stored

7.5HIGH

CVE-2025-10018

all versions

QuickCMS is vulnerable to multiple Stored XSS in language editor functionality (languages). Malicious attacker with admin privileg

4.8MEDIUM

CVE-2025-9981

all versions

QuickCMS is vulnerable to multiple Stored XSS in slider editor functionality (sliders-form). Malicious attacker with admin privile

4.8MEDIUM

CVE-2025-9980

all versions

QuickCMS is vulnerable to multiple Stored XSS in page editor functionality (pages-form). Malicious attacker with admin privileges

4.8MEDIUM

CVE-2025-55175

all versions

QuickCMS is vulnerable to Reflected XSS via sLangEdit parameter in admin's panel functionality. A malicious attacker can craft a

6.1MEDIUM

CVE-2025-54544

all versions

QuickCMS is vulnerable to Stored XSS via aDirFilesDescriptions parameter in files editor functionality. Malicious attacker with

4.8MEDIUM

CVE-2025-54543

all versions

QuickCMS is vulnerable to Stored XSS via sDescriptionMeta parameter in page editor SEO functionality. Malicious attacker with ad

4.8MEDIUM

CVE-2025-54542

all versions

QuickCMS sends password and login via GET Request. This allows a local attacker with access to the victim's browser history to ob

5.5MEDIUM

CVE-2025-54541

all versions

QuickCMS is vulnerable to Cross-Site Request Forgery in page deletion functionality. Malicious attacker can craft special website,

4.3MEDIUM

CVE-2025-54540

all versions

QuickCMS is vulnerable to Reflected XSS via sSort parameter in admin's panel functionality. A malicious attacker can craft a spe

6.1MEDIUM

CVE-2025-54175

all versions

QuickCMS.EXT is vulnerable to Reflected XSS in sFileName parameter in thumbnail viewer functionality. An attacker can craft a

6.1MEDIUM

CVE-2025-54174

all versions

QuickCMS is vulnerable to Cross-Site Request Forgery in article creation functionality. Malicious attacker can craft special websi

4.3MEDIUM

CVE-2025-54172

all versions

QuickCMS is vulnerable to Stored XSS in sTitle parameter in page editor functionality. Malicious attacker with admin privileges c

4.8MEDIUM

CVE-2023-43346

all versions

Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a c

5.4MEDIUM

CVE-2023-43345

all versions

Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a c

8.6HIGH

CVE-2023-43344

all versions

Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a c

5.4MEDIUM

CVE-2023-43342

all versions

Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a c

5.4MEDIUM

CVE-2023-43343

all versions

Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a c

5.4MEDIUM

CVE-2020-35754

< 6.7

OpenSolution Quick.CMS < 6.7 and Quick.Cart < 6.7 allow an authenticated user to perform code injection (and consequently Remote C

7.2HIGH

CVE-2012-6430

all versions

Cross-site scripting (XSS) vulnerability in Open Solution Quick.Cms 5.0 and Quick.Cart 6.0, possibly as downloaded before December

CVE-2012-3833

all versions

Cross-site scripting (XSS) vulnerability in the default index page in admin/ in Quick.CMS 4.0 allows remote attackers to inject ar

CVE-2009-4121

all versions

Multiple cross-site request forgery (CSRF) vulnerabilities in Quick.CMS 2.4 and Quick.CMS.Lite 2.4 allow remote attackers to hijac

CVE-2009-1410

all versions

SQL injection vulnerability in index.php in Quick.Cms.Lite 0.5 allows remote attackers to execute arbitrary SQL commands via the i

CVE-2008-4139

all versions

Cross-site scripting (XSS) vulnerability in admin.php in OpenSolution Quick.Cms.Lite 2.1 allows remote attackers to inject arbitra

CVE-2006-5834

all versions

Directory traversal vulnerability in general.php in OpenSolution Quick.Cms.Lite 0.3 allows remote attackers to include arbitrary f