Skip to content
Noroxi

xqus records

4 published records for vendor xqus.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

      The weakness classes this vendor ships most often: where to look.

      CWE

      Attack profile

      All records

      4 records
      • CVE-2002-1656
        32Monitor

        X-News (x_news) 1.1 and earlier allows attackers to authenticate as other users by obtaining the MD5 checksum of the password, e.g.

        HighCVSS 7.5Proof of conceptEPSS 8%

        xqus · x-newsDec 31, 2002

      • CVE-2002-2046
        30Monitor

        x_news.php in X-News (x_news) 1.1 and earlier allows remote attackers to gain administrative privileges by stealing and replaying the md5_pa

        HighCVSS 7.5No exploitEPSS 1%

        xqus · x-newsDec 31, 2002

      • CVE-2002-2045
        26Monitor

        x_stat_admin.php in x-stat 2.3 and earlier allows remote attackers to (1) execute PHP commands such as phpinfo or (2) obtain the full path o

        MediumCVSS 6.4No exploitEPSS 1%

        xqus · x-statDec 31, 2002

      • CVE-2002-2044
        18Monitor

        Cross-site scripting (XSS) vulnerability in x_stat_admin.php in x-stat 2.3 and earlier allows remote attackers to inject arbitrary web scrip

        MediumCVSS 4.3No exploitEPSS 1%

        xqus · x-statDec 31, 2002