5 matches found
CVE-2020-15947
A SQL injection vulnerability in the qmadm/qmexportstatsrun.do endpoint of Loway QueueMetrics before 19.10.21 allows remote authenticated users to execute arbitrary SQL commands via the exportId parameter...
Sql injection
A SQL injection vulnerability in the qmadm/qmexportstatsrun.do endpoint of Loway QueueMetrics before 19.10.21 allows remote authenticated users to execute arbitrary SQL commands via the exportId parameter...
CVE-2020-15947
A SQL injection vulnerability in the qmadm/qmexportstatsrun.do endpoint of Loway QueueMetrics before 19.10.21 allows remote authenticated users to execute arbitrary SQL commands via the exportId parameter...
PT-2020-14729
Name of the Vulnerable Software and Affected Versions Loway QueueMetrics versions prior to 19.10.21 Description A SQL injection issue allows remote authenticated users to execute arbitrary SQL commands via the exportId parameter in the "qm adm/qm export stats run.do" endpoint. Recommendations For...
CVE-2020-15947: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in the qmadm/qmexportstatsrun.do endpoint of Loway QueueMetrics before 19.10.21 allows remote authenticated users to execute arbitrary SQL commands via the exportId parameter...