CVE-2024-42341

CVE-2024-42341 concerns a URL redirection to an untrusted site (Open Redirect) in Loway QueueMetrics . Connected sources attribute the issue to an input validation/open-redirect flaw, with mention of affected version(s) (e.g., 22.11.6 in CNNVD) and no publicly available information about a fix or...

CVE-2024-42342

Loway QueueMetrics is affected by an HTTP request/response smuggling vulnerability (CWE-444). The linked documents identify the issue in QueueMetrics and cite version 22.11.6 as affected, describing it as an environmental issue vulnerability. No explicit fix/version is provided across the connect...

CVE-2024-42343

CVE-2024-42343 concerns a vulnerability in Loway QueueMetrics where an observable response discrepancy exists. Connected sources identify the affected product as Loway QueueMetrics, with versions cited as 17.06.1 through 22.02.11 (CNNVD) and reference to an observable response discrepancy that ca...

CVE-2020-15947

CVE-2020-15947 is a SQL injection affecting Loway QueueMetrics prior to 19.10.21 in the qm_adm/qm_export_stats_run.do endpoint. The issue allows a remote authenticated user to cause arbitrary SQL commands through the exportId parameter. Documented exploit details are not provided beyond the vulne...

CVE-2020-15925

CVE-2020-15925 describes a SQL injection in Loway QueueMetrics prior to version 19.10.21, exploitable via the TPF_XPAR1 parameter in a tpf URI. The vulnerability is triggered by remote authenticated attackers and can lead to arbitrary SQL execution, impacting data integrity and confidentiality. A...

CVE-2020-13127

The CVE-2020-13127 entry describes an SQL injection vulnerability in Loway QueueMetrics prior to version 19.04.1. The issue occurs at a tpf URI and allows remote authenticated attackers to execute arbitrary SQL commands via the TASKS_LIST__pt.querystring parameter. The vulnerability amount to hig...