漏洞描述 Qualitor是一个用于软件测试和质量保证的工具,通常用于管理测试用例、缺陷跟踪和测试报告等功能。它帮助团队提高软件质量,确保产品按预期运行。Qualitor8.20及之前版本存在命令注入漏洞,远程攻击者可利用该漏洞通过PHP代码执行任意代码。
相关漏洞推荐 CVE-2023-47253: Qualitor <= 8.20 - Remote Code Execution POC 2025-08-01 | Qualitor Qualitor through 8.20 allows remote attackers to execute arbitrary code via PHP code in the html/ad/... CVE-2024-44849: Qualitor <= 8.24 - Remote Code Execution POC 2025-08-01 | Qualitor Qualitor up to 8.24 is vulnerable to Remote Code Execution (RCE) via Arbitrary File Upload in checkA... CVE-2024-48360: Qualitor <= v8.24 - Server-Side Request Forgery POC 2025-08-01 | Qualitor Qualitor v8.24 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /req... SourceCodester Pet Grooming Management Software SQL注入漏洞 无POC 2025-09-22 00:22:31 | SourceCodester Pet Grooming Management Software SourceCodester Pet Grooming Management Software是SourceCodester开源的一个宠物美容管理系统。 SourceCodester Pet Groo... D-Link DIR-645 命令注入漏洞 无POC 2025-09-22 00:22:31 | D-Link DIR-645 D-Link DIR-645是中国友讯(D-Link)公司的一款无线路由器。 D-Link DIR-645 105B01版本存在命令注入漏洞,该漏洞源于对文件/soap.cgi中参数service的错...