CVE-2020-15947

CVE-2020-15947 is a SQL injection affecting Loway QueueMetrics prior to 19.10.21 in the qm_adm/qm_export_stats_run.do endpoint. The issue allows a remote authenticated user to cause arbitrary SQL commands through the exportId parameter. Documented exploit details are not provided beyond the vulne...