quickersite records

7 published records for vendor quickersite.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 2
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

7 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
31Monitor	CVE-2008-6677Proof of concept	Unrestricted file upload vulnerability in fckeditor251/editor/filemanager/connectors/asp/upload.asp in QuickerSite 1.8.5 allows remote attacquickersite · quickersite · CWE-94 pre-auth RCE File upload	High7.5	—	4.0%	Apr 8, 2009
31Monitor	CVE-2008-6673Proof of concept	asp/bs_login.asp in QuickerSite 1.8.5 does not properly restrict access to administrative functionality, which allows remote attackers to (1quickersite · quickersite · CWE-264 Pre-auth	High7.5	—	2.2%	Apr 8, 2009
30Monitor	CVE-2008-6678Proof of concept	SQL injection vulnerability in asp/includes/contact.asp in QuickerSite 1.8.5 allows remote attackers to execute arbitrary SQL commands via tquickersite · quickersite · CWE-89 pre-auth RCE SQL injection	High7.5	—	1.1%	Apr 8, 2009
21Monitor	CVE-2008-6676Proof of concept	QuickerSite 1.8.5 allows remote attackers to obtain sensitive information via a request to showThumb.aspx without any parameters, which revequickersite · quickersite · CWE-20 Pre-auth	Medium5.0	—	3.0%	Apr 8, 2009
21Monitor	CVE-2008-6674Proof of concept	mailPage.asp in QuickerSite 1.8.5 allows remote attackers to flood e-mail accounts with messages via a large number of requests with a modifquickersite · quickersite · CWE-264 Pre-auth Denial of service	Medium5.0	—	2.7%	Apr 8, 2009
18Monitor	CVE-2007-3940No exploit	Cross-site scripting (XSS) vulnerability in default.asp in QuickerSite 1.7.2 allows remote attackers to inject arbitrary web script or HTML quickersite · quickersite Pre-auth XSS	Medium4.3	—	1.7%	Jul 20, 2007
18Monitor	CVE-2008-6675Proof of concept	Multiple cross-site scripting (XSS) vulnerabilities in QuickerSite 1.8.5 allow remote attackers to inject arbitrary web script or HTML via (quickersite · quickersite · CWE-79 Pre-auth XSS	Medium4.3	—	1.7%	Apr 8, 2009

CVE-2008-6677
31Monitor
Unrestricted file upload vulnerability in fckeditor251/editor/filemanager/connectors/asp/upload.asp in QuickerSite 1.8.5 allows remote attac
HighCVSS 7.5Proof of conceptEPSS 4%
- pre-auth RCE
- File upload
quickersite · quickersiteApr 8, 2009
CVE-2008-6673
31Monitor
asp/bs_login.asp in QuickerSite 1.8.5 does not properly restrict access to administrative functionality, which allows remote attackers to (1
HighCVSS 7.5Proof of conceptEPSS 2%
- Pre-auth
quickersite · quickersiteApr 8, 2009
CVE-2008-6678
30Monitor
SQL injection vulnerability in asp/includes/contact.asp in QuickerSite 1.8.5 allows remote attackers to execute arbitrary SQL commands via t
HighCVSS 7.5Proof of conceptEPSS 1%
- pre-auth RCE
- SQL injection
quickersite · quickersiteApr 8, 2009
CVE-2008-6676
21Monitor
QuickerSite 1.8.5 allows remote attackers to obtain sensitive information via a request to showThumb.aspx without any parameters, which reve
MediumCVSS 5.0Proof of conceptEPSS 3%
- Pre-auth
quickersite · quickersiteApr 8, 2009
CVE-2008-6674
21Monitor
mailPage.asp in QuickerSite 1.8.5 allows remote attackers to flood e-mail accounts with messages via a large number of requests with a modif
MediumCVSS 5.0Proof of conceptEPSS 2%
- Pre-auth
- Denial of service
quickersite · quickersiteApr 8, 2009
CVE-2007-3940
18Monitor
Cross-site scripting (XSS) vulnerability in default.asp in QuickerSite 1.7.2 allows remote attackers to inject arbitrary web script or HTML
MediumCVSS 4.3No exploitEPSS 1%
- Pre-auth
- XSS
quickersite · quickersiteJul 20, 2007
CVE-2008-6675
18Monitor
Multiple cross-site scripting (XSS) vulnerabilities in QuickerSite 1.8.5 allow remote attackers to inject arbitrary web script or HTML via (
MediumCVSS 4.3Proof of conceptEPSS 1%
- Pre-auth
- XSS
quickersite · quickersiteApr 8, 2009