Lucene search
+L

5 matches found

osv_cve
osv_cve
•added 2020/08/13 2:15 p.m.•19 views

CVE-2020-15947

A SQL injection vulnerability in the qmadm/qmexportstatsrun.do endpoint of Loway QueueMetrics before 19.10.21 allows remote authenticated users to execute arbitrary SQL commands via the exportId parameter...

8.8CVSS7.6AI score0.01096EPSS
SaveExploits0References1
Prion
Prion
•added 2020/08/13 2:15 p.m.•29 views

Sql injection

A SQL injection vulnerability in the qmadm/qmexportstatsrun.do endpoint of Loway QueueMetrics before 19.10.21 allows remote authenticated users to execute arbitrary SQL commands via the exportId parameter...

6.5CVSS8.8AI score0.01096EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/08/13 2:09 p.m.•36 views

CVE-2020-15947

A SQL injection vulnerability in the qmadm/qmexportstatsrun.do endpoint of Loway QueueMetrics before 19.10.21 allows remote authenticated users to execute arbitrary SQL commands via the exportId parameter...

8.9AI score0.01096EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/08/13 12:00 a.m.•4 views

PT-2020-14729

Name of the Vulnerable Software and Affected Versions Loway QueueMetrics versions prior to 19.10.21 Description A SQL injection issue allows remote authenticated users to execute arbitrary SQL commands via the exportId parameter in the "qm adm/qm export stats run.do" endpoint. Recommendations For...

8.8CVSS0.01096EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/13 12:00 a.m.•10 views

CVE-2020-15947: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in the qmadm/qmexportstatsrun.do endpoint of Loway QueueMetrics before 19.10.21 allows remote authenticated users to execute arbitrary SQL commands via the exportId parameter...

8.8CVSS6.4AI score0.01096EPSS
SaveExploits0References2
Rows per page
Query Builder