Vulnerability index

Browse CVEs

5 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

MEDIUM 6.1 CVE-2021-45281 QuickBox Pro v2.4.8 contains a cross-site scripting (XSS) vulnerability at "adminuseredit.php?usertoedit=XSS", as the user supplied input for the val… Quickbox No fix yet Fix from $1,6002022-02-07 HIGH 8.8 CVE-2021-44981 In QuickBox Pro v2.5.8 and below, the config.php file has a variable which takes a GET parameter value and parses it into a shell_exec(''); function … Quickbox after 2.5.8 Fix from $1,9502022-01-24 HIGH 7.2 CVE-2020-13695 In QuickBox Community Edition through 2.5.5 and Pro Edition through 2.1.8, the local www-data user has sudo privileges to execute grep as root withou… Quickbox after 2.5.5 Fix from $1,9502020-06-01 HIGH 8.8 CVE-2020-13448EPSS 17% QuickBox Community Edition through 2.5.5 and Pro Edition through 2.1.8 allows an authenticated remote attacker to execute code on the server via comm… Quickbox after 2.5.5 Fix from $1,9502020-06-01 HIGH 8.8 CVE-2020-13694 In QuickBox Community Edition through 2.5.5 and Pro Edition through 2.1.8, the local www-data user can execute sudo mysql without a password, which m… Quickbox after 2.5.5 Fix from $1,9502020-06-01