CVE-2013-7139

N/A Unknown

Published: January 09, 2014 Modified: April 29, 2026

Description

SQL injection vulnerability in download.php in Horizon Quick Content Management System (QCMS) 4.0 and earlier allows remote to execute arbitrary SQL commands via the category parameter.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://www.securityfocus.com/bid/64715

Source: cve@mitre.org

Exploit

https://www.htbridge.com/advisory/HTB23191

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/64715

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://www.htbridge.com/advisory/HTB23191

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

4 reference(s) from NVD

Quick Stats

CVSS v3 Score

N/A / 10.0

EPSS (Exploit Probability)

0.3%

56th percentile

Exploitation Status

Not in CISA KEV

Weaknesses (CWE)

CWE-89

Affected Vendors

cynthia_fridsma

Related CVEs