VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 9, 2014· Updated Jun 17, 2026

CVE-2013-7139

CVE-2013-7139

Description

SQL injection vulnerability in download.php in Horizon Quick Content Management System (QCMS) 4.0 and earlier allows remote to execute arbitrary SQL commands via the category parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Cynthia Fridsma/Horizon Quick Content Management System6 versions
    cpe:2.3:a:cynthia_fridsma:horizon_quick_content_management_system:*:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:cynthia_fridsma:horizon_quick_content_management_system:*:*:*:*:*:*:*:*range: <=4.0
    • cpe:2.3:a:cynthia_fridsma:horizon_quick_content_management_system:3.2:a:*:*:*:*:*:*
    • cpe:2.3:a:cynthia_fridsma:horizon_quick_content_management_system:3.3:*:*:*:*:*:*:*
    • cpe:2.3:a:cynthia_fridsma:horizon_quick_content_management_system:3.4:*:*:*:*:*:*:*
    • cpe:2.3:a:cynthia_fridsma:horizon_quick_content_management_system:3.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cynthia_fridsma:horizon_quick_content_management_system:3.5.2:*:*:*:*:*:*:*
  • Horizon/Quick Content Management Systemllm-fuzzy
    Range: <=4.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.