CVE-2020-15925

2020-08-1313:46:47

mitre

www.cve.org

sql injection

loway queuemetrics

remote authenticated attackers

tpf_xpar1 parameter

AI Score

8.9

Confidence

High

EPSS

0.001

Percentile

44.5%

JSON

A SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.10.21 allows remote authenticated attackers to execute arbitrary SQL commands via the TPF_XPAR1 parameter.

References

blog.divisionzero.co/2020/08/12/cve-2020-15925/