qualitor Vulnerabilities and Affected Products
Vulnerabilities associated with qalitor.
Products
Clear product- qualitor3 vulnerabilities
- qalitor2 vulnerabilities
- Qualitor ITSM1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-44849CRITICAL | Qualitor checkAcesso.php Remote Code Execution VulnerabilityQualitor up to 8.24 is vulnerable to Remote Code Execution (RCE) via Arbitrary File Upload in checkAcesso.php. | CVSS9.8v3.1 | EPSS46.3% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |
CVE-2023-47253CRITICAL | qualitor qualitor Improper Neutralization of Special Elements used in a Command ('Command Injection')Qualitor through 8.20 allows remote attackers to execute arbitrary code via PHP code in the html/ad/adpesquisasql/request/processVariavel.php gridValoresPopHidden parameter. | CVSS9.8v3.1 | EPSS14.4% | PoCs2 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |