PT-2022-11960

Name of the Vulnerable Software and Affected Versions Quicklert for Digium version 10.0.0 1043 Description An arbitrary file upload issue exists in the albumimages.jsp file, allowing an authenticated attacker with low privileges to execute remote code on the target server within the context of th...

CVE-2021-43970: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability exists in albumimages.jsp in Quicklert for Digium 10.0.0 1043 via a .mp3;.jsp filename for a file that begins with audio data bytes. It allows an authenticated low privileged attacker to execute remote code on the target server within the context of...

PT-2022-11959

Name of the Vulnerable Software and Affected Versions Quicklert for Digium version 10.0.0 1043 Description The issue affects the login.jsp page, allowing for Blind SQL Injection with Out-of-Band Interaction DNS and Blind Time-Based SQL Injections. This can be exploited to disclose all data within...

CVE-2021-43969: Improper Neutralization of Special Elements used in an SQL Command

The login.jsp page of Quicklert for Digium 10.0.0 1043 is affected by both Blind SQL Injection with Out-of-Band Interaction DNS and Blind Time-Based SQL Injections. Exploitation can be used to disclose all data within the database up to and including the administrative accounts' login IDs and...