Quick.cms vulnerabilities
5 known vulnerabilities in Quick.cms from OpenSolution. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.0 High severity
Quick.CMS: Client-Side Enforcement of Server-Side Security
In Quick.CMS, the administrative user interface restricts deletion of the primary language by omitting the corresponding option from the interface; however, the underlying language-deletion API endpoint does not enforce an equivalent server-side authorization
- 7.5 High severity
Quick.CMS: Improper Control of Generation of Code
Quick.CMS deserializes user-controlled data received over plaintext HTTP without ensuring integrity or authenticity. This allows attackers to tamper with serialized payloads in transit and inject malicious objects. Because deserialization is performed without
- 9.8 Critical severity
Quick.CMS: Improper Neutralization of Special Elements used in an SQL Command
Quick.CMS 6.7 contains a SQL injection vulnerability that allows unauthenticated attackers to bypass login authentication by manipulating the login form. Attackers can inject specific SQL payloads like ' or '1'='1 to gain unauthorized administrative access to
- 7.5 High severity
QuickCMS: Plaintext Storage of a Password
A vulnerability exists in QuickCMS version 6.8 where sensitive admin credentials are hardcoded in a configuration file and stored in plaintext. This flaw allows attackers with access to the source code or the server file system to retrieve authentication detai
- 8.6 High severity
Quick CMS: Improper Neutralization of Input During Web Page Generation
Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Content - Name parameter in the Pages Menu component.