CVE-2020-10578: High severity q-cms vulnerability

Published Mar 14, 2020

Updated

An arbitrary file read vulnerability exists in system/controller/backend/template.php in QCMS v3.0.1.

Affected Software

1 affected component

Q-cms Qcms=3.0.1

Event History

Mar 14, 2020

CVE Published

via MITRE·07:30 PM

Data Sourced

via MITRE·07:30 PM

Description

Frequently Asked Questions

Who can exploit this issue?

Any QCMS v3.0.1 deployment with the affected backend template controller reachable over the network may be exposed. The CVSS vector indicates exploitation can be performed remotely without authentication or user interaction.

What is the likely impact of successful exploitation?

The issue allows arbitrary file read, which can expose the contents of files accessible to the QCMS application process. The provided CVSS vector rates confidentiality impact as high and does not indicate integrity or availability impact.

CVE-2020-10578: High severity q-cms vulnerability

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

Who can exploit this issue?

What is the likely impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the likely impact of successful exploitation?