📦 Qatraq

QaTraq 6.9.2 ships with default administrative credentials that are enabled in fresh installations. This allows attackers who can access the login page to immediately gain administrative privileges. A...

QaTraq 6.9.2 contains an unrestricted file upload vulnerability that allows authenticated users to upload PHP files, leading to remote code execution. Attackers can upload malicious PHP scripts that e...