CVE-2024-42342

Loway QueueMetrics is affected by an HTTP request/response smuggling vulnerability (CWE-444). The linked documents identify the issue in QueueMetrics and cite version 22.11.6 as affected, describing it as an environmental issue vulnerability. No explicit fix/version is provided across the connect...

CVE-2024-42341 Loway - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

Loway - CWE-601: URL Redirection to Untrusted Site 'Open Redirect'...

CVE-2024-42341

CVE-2024-42341 concerns a URL redirection to an untrusted site (Open Redirect) in Loway QueueMetrics . Connected sources attribute the issue to an input validation/open-redirect flaw, with mention of affected version(s) (e.g., 22.11.6 in CNNVD) and no publicly available information about a fix or...

CVE-2024-42341 Loway - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

Loway - CWE-601: URL Redirection to Untrusted Site 'Open Redirect'...

Loway QueueMetrics 安全漏洞

Loway QueueMetrics is a tool from Loway that allows you to automate the installation of a pre-configured QueueMetrics system on the most common Asterisk distributions. A security vulnerability exists in Loway QueueMetrics versions 17.06.1 through 22.02.11 that stems from the presence of observabl...

CVE-2024-42341: URL Redirection to Untrusted Site

Loway - CWE-601: URL Redirection to Untrusted Site 'Open Redirect'...

CVE-2024-42342: Inconsistent Interpretation of HTTP Requests

Loway - CWE-444: Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling'...

CVE-2024-42343: Observable Response Discrepancy

Loway - CWE-204: Observable Response Discrepancy...

Loway QueueMetrics 环境问题漏洞

Loway QueueMetrics is a tool from Loway that allows you to automate the installation of a pre-configured QueueMetrics system on the most common Asterisk distributions. An environmental issue vulnerability exists in Loway QueueMetrics version 22.11.6 that stems from HTTP request/response smuggling...

Loway QueueMetrics 输入验证错误漏洞

Loway QueueMetrics is a tool from Loway that allows you to automate the installation of a pre-configured QueueMetrics system on the most common Asterisk distributions. An input validation error vulnerability exists in Loway QueueMetrics version 22.11.6, which stems from a URL redirection to an...

PT-2024-6629 · Loway · Loway Queuemetrics

Name of the Vulnerable Software and Affected Versions: Loway QueueMetrics affected versions not specified Description: The issue is related to a URL redirection to an untrusted site, also known as an 'Open Redirect'. This occurs when loading the login page, allowing a remote attacker to redirect ...

PT-2024-9888 · Loway · Loway Queuemetrics

Name of the Vulnerable Software and Affected Versions: Loway QueueMetrics affected versions not specified Description: The issue is related to an observable response discrepancy in Loway QueueMetrics, which can be exploited by a remote attacker to gain unauthorized access to sensitive data by...

CVE-2020-13127

A SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.04.1 allows remote authenticated attackers to execute arbitrary SQL commands via the TASKSLISTpt.querystring parameter...

CVE-2020-13127

A SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.04.1 allows remote authenticated attackers to execute arbitrary SQL commands via the TASKSLISTpt.querystring parameter...

Sql injection

A SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.04.1 allows remote authenticated attackers to execute arbitrary SQL commands via the TASKSLISTpt.querystring parameter...

CVE-2020-13127

The CVE-2020-13127 entry describes an SQL injection vulnerability in Loway QueueMetrics prior to version 19.04.1. The issue occurs at a tpf URI and allows remote authenticated attackers to execute arbitrary SQL commands via the TASKS_LIST__pt.querystring parameter. The vulnerability amount to hig...

CVE-2020-13127

A SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.04.1 allows remote authenticated attackers to execute arbitrary SQL commands via the TASKSLISTpt.querystring parameter...

PT-2020-13344

Name of the Vulnerable Software and Affected Versions Loway QueueMetrics versions prior to 19.04.1 Description A SQL injection issue exists at the tpf URI, allowing remote authenticated attackers to execute arbitrary SQL commands via the TASKS LIST pt.querystring parameter. Recommendations For...

CVE-2020-13127: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.04.1 allows remote authenticated attackers to execute arbitrary SQL commands via the TASKSLISTpt.querystring parameter...

CVE-2020-15947

A SQL injection vulnerability in the qmadm/qmexportstatsrun.do endpoint of Loway QueueMetrics before 19.10.21 allows remote authenticated users to execute arbitrary SQL commands via the exportId parameter...