Skip to content
OpenAdvisories

Vendor

QCubed

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 6.1

    QCubed 3.1.1 Reflected XSS via installer step_2.php

    QCubed 2.2.0 through 3.1.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the installation_path parameter. Attackers can craft GET requests to /assets/php/_devtools/installer/step_2.php …