Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown
CVE-2024-40318
Disclosure Date: July 25, 2024 (last updated August 27, 2024)
An arbitrary file upload vulnerability in Webkul Qloapps v1.6.0.0 allows attackers to execute arbitrary code via uploading a crafted file.
0
Attacker Value
Unknown
CVE-2023-36287
Disclosure Date: June 23, 2023 (last updated October 08, 2023)
An unauthenticated Cross-Site Scripting (XSS) vulnerability found in Webkul QloApps 1.6.0 allows an attacker to obtain a user's session cookie and then impersonate that user via POST controller parameter.
0
Attacker Value
Unknown
CVE-2023-36284
Disclosure Date: June 23, 2023 (last updated October 08, 2023)
An unauthenticated Time-Based SQL injection found in Webkul QloApps 1.6.0 via GET parameter date_from, date_to, and id_product allows a remote attacker to bypass a web application's authentication and authorization mechanisms and retrieve the contents of an entire database.
0
Attacker Value
Unknown
CVE-2023-36289
Disclosure Date: June 23, 2023 (last updated October 08, 2023)
An unauthenticated Cross-Site Scripting (XSS) vulnerability found in Webkul QloApps 1.6.0 allows an attacker to obtain a user's session cookie and then impersonate that user via POST email_create and back parameter.
0
Attacker Value
Unknown
CVE-2023-36288
Disclosure Date: June 23, 2023 (last updated October 08, 2023)
An unauthenticated Cross-Site Scripting (XSS) vulnerability found in Webkul QloApps 1.6.0 allows an attacker to obtain a user's session cookie and then impersonate that user via GET configure parameter.
0
