Qualitor vulnerabilities
We track 3 vulnerabilities in Qualitor products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 30, 2025.
Latest Qualitor vulnerabilities
- 7.3 High severity
Qualitor: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security flaw has been discovered in Qualitor up to 8.20.104/8.24.97. Affected by this vulnerability is the function eval of the file /html/st/stdeslocamento/request/getResumo.php. Performing a manipulation of the argument passageiros results in code injecti
- 8.1 High severity
Qualitor: Improper Neutralization of Special Elements used in a Command
A vulnerability was found in Qualitor 8.20/8.24. It has been rated as critical. Affected by this issue is some unknown functionality of the file /html/ad/adconexaooffice365/request/testaConexaoOffice365.php of the component Office 365-type Connection Handler.
- 9.8 Critical severity
qalitor: Improper Neutralization of Special Elements used in a Command
Qualitor through 8.20 allows remote attackers to execute arbitrary code via PHP code in the html/ad/adpesquisasql/request/processVariavel.php gridValoresPopHidden parameter.