CVE-2023-41285

A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.1.4 and later...

Command injection

An OS command injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following version: QuMagie 2.1.3 and later...

Sql injection

A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.1.4 and later...

Sql injection

A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.1.4 and later...

CVE-2023-41285 QuMagie

A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.1.4 and later...

CVE-2023-41285 QuMagie

A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.1.4 and later...

CVE-2023-41285

CVE-2023-41285 affects QuMagie prior to version 2.1.4. The issue is a SQL injection vulnerability that could be exploited by authenticated users over the network to inject malicious code. Affected software: QuMagie (QNAP) with versions before 2.1.4. Root cause described in available documents is ...

CVE-2023-41284 QuMagie

A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.1.4 and later...

CVE-2023-41284 QuMagie

A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.1.4 and later...

CVE-2023-41284

CVE-2023-41284 affects QuMagie. A SQL injection vulnerability could let authenticated users inject malicious code over the network. QuMagie 2.1.4 and later fixes exist; versions prior to 2.1.4 are affected. Official disclosures cite high-impact metrics (network attack, low complexity, low privile...

CVE-2023-39295 QuMagie

An OS command injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following version: QuMagie 2.1.3 and later...

CVE-2023-39295

QuMagie has an OS command injection vulnerability that allows authenticated users to execute commands over the network. Affected versions are prior to 2.1.3; the issue is fixed in 2.1.3 and later. CVSS v3.1 metrics indicate high impact (C/H, I/H, A/H) with network exploitability and low privilege...

CVE-2023-39295 QuMagie

An OS command injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following version: QuMagie 2.1.3 and later...

PT-2023-26876 · Qumagie · Qumagie

Name of the Vulnerable Software and Affected Versions: QuMagie versions prior to 2.1.3 Description: An OS command injection issue has been reported, potentially allowing authenticated users to execute commands via a network. Recommendations: For versions prior to 2.1.3, update to QuMagie 2.1.3 or...

QNAP Systems QuMagie SQL Injection Vulnerability

QNAP Systems QuMagie is a QTS photo management application from QNAP Systems. A security vulnerability exists in QNAP Systems QuMagie version 2.1.3 and prior versions, which stems from the presence of a SQL injection vulnerability that could allow an authenticated user to inject malicious code ov...

PT-2023-27883 · Qumagie · Qumagie

Name of the Vulnerable Software and Affected Versions: QuMagie versions prior to 2.1.4 Description: A SQL injection issue has been reported, potentially allowing authenticated users to inject malicious code via a network. Recommendations: For versions prior to 2.1.4, update to QuMagie 2.1.4 or...

QuMagie SQL Injection Vulnerability

QNAP Systems QuMagie is a QTS photo management application from QNAP Systems. A security vulnerability exists in QNAP Systems QuMagie version 2.1.3 and prior versions, which stems from the presence of a SQL injection vulnerability that could allow an authenticated user to inject malicious code ov...

QNAP Systems QuMagie Operating System Command Injection Vulnerability

QNAP Systems QuMagie is a QTS photo management application from QNAP Systems. A security vulnerability exists in QNAP Systems QuMagie version 2.1.3 and earlier, which stems from an operating system command injection vulnerability that could allow an authenticated administrator to execute commands...

PT-2023-9130 · Qumagie · Qumagie

Name of the Vulnerable Software and Affected Versions: QuMagie versions prior to 2.2.1 Description: A SQL injection issue has been reported, potentially allowing authenticated users to inject malicious code via a network. This could be exploited by a remote attacker to execute arbitrary code. The...