VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 9, 2014· Updated Apr 29, 2026

CVE-2013-7139

CVE-2013-7139

Description

SQL injection vulnerability in download.php in Horizon Quick Content Management System (QCMS) 4.0 and earlier allows remote to execute arbitrary SQL commands via the category parameter.

Affected products

6
  • Cynthia Fridsma/Horizon Quick Content Management System6 versions
    cpe:2.3:a:cynthia_fridsma:horizon_quick_content_management_system:*:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:cynthia_fridsma:horizon_quick_content_management_system:*:*:*:*:*:*:*:*range: <=4.0
    • cpe:2.3:a:cynthia_fridsma:horizon_quick_content_management_system:3.2:a:*:*:*:*:*:*
    • cpe:2.3:a:cynthia_fridsma:horizon_quick_content_management_system:3.3:*:*:*:*:*:*:*
    • cpe:2.3:a:cynthia_fridsma:horizon_quick_content_management_system:3.4:*:*:*:*:*:*:*
    • cpe:2.3:a:cynthia_fridsma:horizon_quick_content_management_system:3.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cynthia_fridsma:horizon_quick_content_management_system:3.5.2:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.