Known vulnerabilities in qdPM

Vendor: qdpm.net
Software: qdPM
Software CPE: cpe:2.3:a:qdpm.net:qdpm:*:*:*:*:*:*:*:*
Website: https://qdpm.net/index.php
Total vulnerabilities: 4
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting qdPM qdPM is affected by 4 known vulnerabilities: 1 high, 2 medium, 1 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU47404 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-26166		 CWE-79 Low
No
No
 - 05.10.2020 SB2020100719
#VU47410 - Unrestricted Upload of File with Dangerous Type
CVE-2020-11811		 CWE-434 High
No
No
 - 16.04.2020 SB2020100719
#VU47411 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2020-11814		 CWE-74 Medium
No
No
 - 16.04.2020 SB2020100719
#VU47412 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-7246		 CWE-22 Medium
Available
No
 - 21.01.2020 SB2020100719