22 matches found
EUVD-2020-7897
Malware in sbrugna...
EUVD-2020-5403
Malware in sbrugna...
EUVD-2020-7918
Malware in sbrugna...
CVE-2020-13127
A SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.04.1 allows remote authenticated attackers to execute arbitrary SQL commands via the TASKSLISTpt.querystring parameter...
Loway QueueMetrics 输入验证错误漏洞
Loway QueueMetrics is a tool from Loway that allows you to automate the installation of a pre-configured QueueMetrics system on the most common Asterisk distributions. An input validation error vulnerability exists in Loway QueueMetrics version 22.11.6, which stems from a URL redirection to an...
Loway QueueMetrics 安全漏洞
Loway QueueMetrics is a tool from Loway that allows you to automate the installation of a pre-configured QueueMetrics system on the most common Asterisk distributions. A security vulnerability exists in Loway QueueMetrics versions 17.06.1 through 22.02.11 that stems from the presence of observabl...
Loway QueueMetrics 环境问题漏洞
Loway QueueMetrics is a tool from Loway that allows you to automate the installation of a pre-configured QueueMetrics system on the most common Asterisk distributions. An environmental issue vulnerability exists in Loway QueueMetrics version 22.11.6 that stems from HTTP request/response smuggling...
PT-2024-6629 · Loway · Loway Queuemetrics
Name of the Vulnerable Software and Affected Versions: Loway QueueMetrics affected versions not specified Description: The issue is related to a URL redirection to an untrusted site, also known as an 'Open Redirect'. This occurs when loading the login page, allowing a remote attacker to redirect ...
PT-2024-9888 · Loway · Loway Queuemetrics
Name of the Vulnerable Software and Affected Versions: Loway QueueMetrics affected versions not specified Description: The issue is related to an observable response discrepancy in Loway QueueMetrics, which can be exploited by a remote attacker to gain unauthorized access to sensitive data by...
CVE-2020-13127
A SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.04.1 allows remote authenticated attackers to execute arbitrary SQL commands via the TASKSLISTpt.querystring parameter...
Sql injection
A SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.04.1 allows remote authenticated attackers to execute arbitrary SQL commands via the TASKSLISTpt.querystring parameter...
CVE-2020-13127
The CVE-2020-13127 entry describes an SQL injection vulnerability in Loway QueueMetrics prior to version 19.04.1. The issue occurs at a tpf URI and allows remote authenticated attackers to execute arbitrary SQL commands via the TASKS_LIST__pt.querystring parameter. The vulnerability amount to hig...
CVE-2020-13127
A SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.04.1 allows remote authenticated attackers to execute arbitrary SQL commands via the TASKSLISTpt.querystring parameter...
CVE-2020-15947
A SQL injection vulnerability in the qmadm/qmexportstatsrun.do endpoint of Loway QueueMetrics before 19.10.21 allows remote authenticated users to execute arbitrary SQL commands via the exportId parameter...
CVE-2020-15925
A SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.10.21 allows remote authenticated attackers to execute arbitrary SQL commands via the TPFXPAR1 parameter...
CVE-2020-15925
A SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.10.21 allows remote authenticated attackers to execute arbitrary SQL commands via the TPFXPAR1 parameter...
CVE-2020-15947
A SQL injection vulnerability in the qmadm/qmexportstatsrun.do endpoint of Loway QueueMetrics before 19.10.21 allows remote authenticated users to execute arbitrary SQL commands via the exportId parameter...
Sql injection
A SQL injection vulnerability in the qmadm/qmexportstatsrun.do endpoint of Loway QueueMetrics before 19.10.21 allows remote authenticated users to execute arbitrary SQL commands via the exportId parameter...
Sql injection
A SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.10.21 allows remote authenticated attackers to execute arbitrary SQL commands via the TPFXPAR1 parameter...
CVE-2020-15947
CVE-2020-15947 is a SQL injection affecting Loway QueueMetrics prior to 19.10.21 in the qm_adm/qm_export_stats_run.do endpoint. The issue allows a remote authenticated user to cause arbitrary SQL commands through the exportId parameter. Documented exploit details are not provided beyond the vulne...