Product

QCMS (<= 6.0.6)

1 brief RSS

SQL Injection Vulnerability in QCMS Content Detail Page

QCMS versions up to 6.0.6 are vulnerable to remote SQL injection via the ID argument in the self_Tmp function, allowing attackers to execute arbitrary database commands.

QCMS web-application-vulnerability sqli remote-code-execution

1r 1t 1c 6m ago