Lucene search
+L

6 matches found

OSV
OSV
•added 2020/09/09 6:15 p.m.•20 views

CVE-2020-13127

A SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.04.1 allows remote authenticated attackers to execute arbitrary SQL commands via the TASKSLISTpt.querystring parameter...

8.8CVSS7.6AI score0.01378EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/09/09 12:00 a.m.•4 views

PT-2020-13344

Name of the Vulnerable Software and Affected Versions Loway QueueMetrics versions prior to 19.04.1 Description A SQL injection issue exists at the tpf URI, allowing remote authenticated attackers to execute arbitrary SQL commands via the TASKS LIST pt.querystring parameter. Recommendations For...

8.8CVSS0.01378EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/09 12:00 a.m.•10 views

CVE-2020-13127: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.04.1 allows remote authenticated attackers to execute arbitrary SQL commands via the TASKSLISTpt.querystring parameter...

8.8CVSS6.4AI score0.01378EPSS
SaveExploits1References2
OSV
OSV
•added 2020/08/13 2:15 p.m.•18 views

CVE-2020-15925

A SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.10.21 allows remote authenticated attackers to execute arbitrary SQL commands via the TPFXPAR1 parameter...

8.8CVSS7.6AI score0.01096EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/08/13 12:00 a.m.•0 views

PT-2020-14719

Name of the Vulnerable Software and Affected Versions Loway QueueMetrics versions prior to 19.10.21 Description A SQL injection issue exists at a tpf URI, allowing remote authenticated attackers to execute arbitrary SQL commands via the TPF XPAR1 parameter. Recommendations For versions prior to...

8.8CVSS0.01096EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/13 12:00 a.m.•4 views

CVE-2020-15925: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.10.21 allows remote authenticated attackers to execute arbitrary SQL commands via the TPFXPAR1 parameter...

8.8CVSS6.4AI score0.01096EPSS
SaveExploits0References2
Rows per page
Query Builder