Login Request a demo
QL
Product
Qlnews
by Vscripts.pl · last CVE Apr 2, 2006
2
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Vulnerabilities2In the news0Timeline
Severity mix
Critical 0High 0Medium 0Low 0
Severity
All severities2Critical0High0Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Qlnews to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2006-1575
–
2%
Apr 2
Multiple cross-site scripting (XSS) vulnerabilities in news.php in QLnews 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) autorx and (2) newsx…
Affected: 1.2
CVE-2006-1576
–
2%
Apr 2
Direct static code injection vulnerability in QLnews 1.2 allows remote authenticated administrators to execute arbitrary PHP code by modifying config.php
Affected: 1.2
Showing 2