q-cms records

12 published records for vendor q-cms.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

12 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2018-14978No exploit	An issue was discovered in QCMS 3.0.1.q-cms · qcms · CWE-352 Pre-auth CSRF	High8.8	—	0.5%	Aug 6, 2018
30Monitor	CVE-2020-10578No exploit	An arbitrary file read vulnerability exists in system/controller/backend/template.php in QCMS v3.0.1.q-cms · qcms Pre-auth	High7.5	—	1.2%	Mar 14, 2020
26Monitor	CVE-2025-50233No exploit	A vulnerability in QCMS version 6.0.5 allows authenticated users to read arbitrary files from the server due to insufficient validation of tq-cms · qcms · CWE-20 Pre-auth Path traversal	Medium6.5	—	0.5%	Aug 6, 2025
24Monitor	CVE-2018-14977No exploit	An issue was discovered in QCMS 3.0.1.q-cms · qcms · CWE-79 Pre-auth XSS	Medium6.1	—	0.7%	Aug 6, 2018
19Monitor	CVE-2018-14973No exploit	An issue was discovered in QCMS 3.0.1.q-cms · qcms · CWE-79 XSS	Medium4.8	—	0.5%	Aug 6, 2018
19Monitor	CVE-2018-14974No exploit	An issue was discovered in QCMS 3.0.1.q-cms · qcms · CWE-79 XSS	Medium4.8	—	0.5%	Aug 6, 2018
19Monitor	CVE-2018-14969No exploit	An issue was discovered in QCMS 3.0.1.q-cms · qcms · CWE-79 XSS	Medium4.8	—	0.5%	Aug 6, 2018
19Monitor	CVE-2018-14976No exploit	An issue was discovered in QCMS 3.0.1.q-cms · qcms · CWE-79 XSS	Medium4.8	—	0.5%	Aug 6, 2018
19Monitor	CVE-2018-14975No exploit	An issue was discovered in QCMS 3.0.1.q-cms · qcms · CWE-79 XSS	Medium4.8	—	0.5%	Aug 6, 2018
19Monitor	CVE-2018-14970No exploit	An issue was discovered in QCMS 3.0.1.q-cms · qcms · CWE-79 XSS	Medium4.8	—	0.5%	Aug 6, 2018
19Monitor	CVE-2018-14971No exploit	An issue was discovered in QCMS 3.0.1.q-cms · qcms · CWE-79 XSS	Medium4.8	—	0.5%	Aug 6, 2018
19Monitor	CVE-2018-14972No exploit	An issue was discovered in QCMS 3.0.1.q-cms · qcms · CWE-79 XSS	Medium4.8	—	0.5%	Aug 6, 2018

CVE-2018-14978
35Monitor
An issue was discovered in QCMS 3.0.1.
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
q-cms · qcmsAug 6, 2018
CVE-2020-10578
30Monitor
An arbitrary file read vulnerability exists in system/controller/backend/template.php in QCMS v3.0.1.
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
q-cms · qcmsMar 14, 2020
CVE-2025-50233
26Monitor
A vulnerability in QCMS version 6.0.5 allows authenticated users to read arbitrary files from the server due to insufficient validation of t
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
- Path traversal
q-cms · qcmsAug 6, 2025
CVE-2018-14977
24Monitor
An issue was discovered in QCMS 3.0.1.
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
q-cms · qcmsAug 6, 2018
CVE-2018-14973
19Monitor
An issue was discovered in QCMS 3.0.1.
MediumCVSS 4.8No exploitEPSS 1%
- XSS
q-cms · qcmsAug 6, 2018
CVE-2018-14974
19Monitor
An issue was discovered in QCMS 3.0.1.
MediumCVSS 4.8No exploitEPSS 1%
- XSS
q-cms · qcmsAug 6, 2018
CVE-2018-14969
19Monitor
An issue was discovered in QCMS 3.0.1.
MediumCVSS 4.8No exploitEPSS 1%
- XSS
q-cms · qcmsAug 6, 2018
CVE-2018-14976
19Monitor
An issue was discovered in QCMS 3.0.1.
MediumCVSS 4.8No exploitEPSS 1%
- XSS
q-cms · qcmsAug 6, 2018
CVE-2018-14975
19Monitor
An issue was discovered in QCMS 3.0.1.
MediumCVSS 4.8No exploitEPSS 1%
- XSS
q-cms · qcmsAug 6, 2018
CVE-2018-14970
19Monitor
An issue was discovered in QCMS 3.0.1.
MediumCVSS 4.8No exploitEPSS 1%
- XSS
q-cms · qcmsAug 6, 2018
CVE-2018-14971
19Monitor
An issue was discovered in QCMS 3.0.1.
MediumCVSS 4.8No exploitEPSS 1%
- XSS
q-cms · qcmsAug 6, 2018
CVE-2018-14972
19Monitor
An issue was discovered in QCMS 3.0.1.
MediumCVSS 4.8No exploitEPSS 1%
- XSS
q-cms · qcmsAug 6, 2018