qqq_systems_project - MidnightBSD Security Advisories

CVE-2018-0536 MEDIUM

Cross-site scripting vulnerability in QQQ SYSTEMS ver2.24 allows an attacker to inject arbitrary web script or HTML via quiz.cgi.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-79,

Products Affected

Vendor	Product	Version
qqq_systems_project	qqq_systems	2.24

CVE-2018-0537 MEDIUM

Cross-site scripting vulnerability in QQQ SYSTEMS ver2.24 allows an attacker to inject arbitrary web script or HTML via quiz_op.cgi.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-79,

Products Affected

Vendor	Product	Version
qqq_systems_project	qqq_systems	2.24

CVE-2018-0538 MEDIUM

Cross-site scripting vulnerability in QQQ SYSTEMS ver2.24 allows an attacker to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-79,

Products Affected

Vendor	Product	Version
qqq_systems_project	qqq_systems	2.24

CVE-2018-0539 HIGH

QQQ SYSTEMS version 2.24 allows an attacker to execute arbitrary commands via unspecified vectors.

CVSS 2.0

Severity: HIGH

Problem Type: CWE-78,

Products Affected

Vendor	Product	Version
qqq_systems_project	qqq_systems	2.24

Advisories for qqq_systems_project