Product
8 published CVES affecting nchsoftware quorum, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
Newest publication first
In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via logprop?file=/.. for file reading.
In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentprop?file=/.. for file reading.
In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentdelete?file=/.. for file deletion.
In NCH Quorum v2.03 and earlier, XSS exists via User Display Name (stored).
In NCH Quorum v2.03 and earlier, XSS exists via Conference Description (stored).
In NCH Quorum v2.03 and earlier, XSS exists via /uploaddoc?id= (reflected).
In NCH Quorum v2.03 and earlier, XSS exists via /conference?id= (reflected).
In NCH Quorum v2.03 and earlier, XSS exists via /conferencebrowseuploadfile?confid= (reflected).
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.