119 matches found
Sql injection
A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.2.1 and later...
CVE-2023-47219 QuMagie
A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.2.1 and later...
CVE-2023-47219 QuMagie
A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.2.1 and later...
CVE-2023-47219
CVE-2023-47219 affects QNAP QuMagie. The connected PT-2023-9130 entry documents a SQL injection in QuMagie versions prior to 2.2.1, which could allow authenticated users to inject malicious code over the network. Root cause: insufficient protection of the SQL query structure. Impact: potential ar...
CVE-2023-47559 QuMagie
A cross-site scripting XSS vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.2.1 and later...
CVE-2023-47559 QuMagie
A cross-site scripting XSS vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.2.1 and later...
CVE-2023-47559
CVE-2023-47559 – QuMagie XSS vulnerability : An authenticated user can inject malicious script via the network due to an XSS flaw in QuMagie before version 2.2.1. The issue is fixed in QuMagie 2.2.1 and later. Affected components: the QuMagie web context handling that processes input from network...
CVE-2023-47560 QuMagie
An OS command injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following version: QuMagie 2.2.1 and later...
CVE-2023-47560
CVE-2023-47560 is an OS command injection vulnerability in QuMagie. The issue could allow authenticated users to execute commands over the network due to insufficient input handling in the affected component. A fix is available in QuMagie 2.2.1 and later. Commercial advisories and CVE records con...
CVE-2023-47560 QuMagie
An OS command injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following version: QuMagie 2.2.1 and later...
QNAP Systems QuMagie SQL Injection Vulnerability
QNAP Systems QuMagie is a QTS photo management application from QNAP Systems. A SQL injection vulnerability exists in QNAP Systems QuMagie prior to version 2.2.1, which stems from the presence of a SQL injection vulnerability that could allow an authenticated user to inject malicious code over th...
PT-2024-2530 · Qumagie · Qumagie
Name of the Vulnerable Software and Affected Versions: QuMagie versions prior to 2.2.1 Description: The issue is related to an OS command injection vulnerability. It could allow an authenticated user to execute commands via a network. This vulnerability exists due to the lack of measures to...
QNAP Systems QuMagie Cross-Site Scripting Vulnerability
QNAP Systems QuMagie is a QTS photo management application from QNAP Systems. A cross-site scripting vulnerability exists in QNAP Systems QuMagie prior to version 2.2.1, which stems from the presence of a cross-site scripting XSS vulnerability that could allow an authenticated user to inject...
PT-2024-13459 · Qumagie · Qumagie
Name of the Vulnerable Software and Affected Versions: QuMagie versions prior to 2.2.1 Description: A cross-site scripting XSS vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. Recommendations...
QNAP Systems QuMagie Command Injection Vulnerability
QNAP Systems QuMagie is a QTS photo management application from QNAP Systems. A command injection vulnerability exists in QNAP Systems QuMagie prior to version 2.2.1, which stems from the presence of an operating system command injection vulnerability that could allow an authenticated user to...
CVE-2023-39295
An OS command injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following version: QuMagie 2.1.3 and later...
CVE-2023-39295
An OS command injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following version: QuMagie 2.1.3 and later...
CVE-2023-41284
A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.1.4 and later...
CVE-2023-41285
A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.1.4 and later...
CVE-2023-41285
A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.1.4 and later...