Vulnerabilities > Gxlcms > Gxlcms QY

DATE CVE VULNERABILITY TITLE RISK
2018-04-08 CVE-2018-9852 Information Exposure vulnerability in Gxlcms QY 1.0.0713
In Gxlcms QY v1.0.0713, Lib\Lib\Action\Home\HitsAction.class.php allows remote attackers to read data from a database by embedding a FROM clause in a query string within a Home-Hits request, as demonstrated hy sid=user,password%20from%20mysql.user%23.
network
low complexity
gxlcms CWE-200
5.0
2018-04-08 CVE-2018-9851 Path Traversal vulnerability in Gxlcms QY 1.0.0713
In Gxlcms QY v1.0.0713, Lib\Lib\Action\Admin\TplAction.class.php allows remote attackers to read any file via a modified pathname in an Admin-Tpl request, as demonstrated by use of '|' instead of '/' as a directory separator, in conjunction with a ".." sequence.
network
low complexity
gxlcms CWE-22
5.0
2018-04-08 CVE-2018-9850 Path Traversal vulnerability in Gxlcms QY 1.0.0713
In Gxlcms QY v1.0.0713, Lib\Lib\Action\Admin\DataAction.class.php allows remote attackers to delete any file via directory traversal sequences in the id parameter of an Admin-Data-del request.
network
low complexity
gxlcms CWE-22
6.4
2018-04-07 CVE-2018-9848 Code Injection vulnerability in Gxlcms QY 1.0.0713
In Gxlcms QY v1.0.0713, the upload function in Lib\Lib\Action\Admin\UploadAction.class.php allows remote attackers to execute arbitrary PHP code by first using an Admin-Admin-Configsave request to change the config[upload_class] value from jpg,gif,png,jpeg to jpg,gif,png,jpeg,php and then making an Admin-Upload-Upload request.
network
low complexity
gxlcms CWE-94
7.5
2018-04-07 CVE-2018-9847 Code Injection vulnerability in Gxlcms QY 1.0.0713
In Gxlcms QY v1.0.0713, the update function in Lib\Lib\Action\Admin\TplAction.class.php allows remote attackers to execute arbitrary PHP code by placing this code into a template.
network
low complexity
gxlcms CWE-94
7.5
2018-04-04 CVE-2018-9247 SQL Injection vulnerability in Gxlcms QY 1.0.0713
The upsql function in \Lib\Lib\Action\Admin\DataAction.class.php in Gxlcms QY v1.0.0713 allows remote attackers to execute arbitrary SQL statements via the sql parameter.
network
low complexity
gxlcms CWE-89
7.5