qualitor Vulnerabilities and Affected Products
Explore source-attributed vulnerabilities associated with qualitor products.
Products
- qualitor3 vulnerabilities
- qalitor2 vulnerabilities
- Qualitor ITSM1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-48359CRITICAL | Qualitor v8.24 was discovered to contain a remote code execution (RCE) vulnerability via the gridValoresPopHidden parameter. CWE-94Oct 31, 2024 | CVSS9.8v3.1 | EPSS2.28% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-48360HIGH | Qualitor <= v8.24 - Server-Side Request ForgeryQualitor v8.24 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /request/viewValidacao.php. | CVSS7.5v3.1 | EPSS3.94% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |
CVE-2024-44849CRITICAL | Qualitor checkAcesso.php Remote Code Execution VulnerabilityQualitor up to 8.24 is vulnerable to Remote Code Execution (RCE) via Arbitrary File Upload in checkAcesso.php. | CVSS9.8v3.1 | EPSS46.3% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |
CVE-2023-47253CRITICAL | qualitor qualitor Improper Neutralization of Special Elements used in a Command ('Command Injection')Qualitor through 8.20 allows remote attackers to execute arbitrary code via PHP code in the html/ad/adpesquisasql/request/processVariavel.php gridValoresPopHidden parameter. | CVSS9.8v3.1 | EPSS14.4% | PoCs2 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |