Skip to content
OpenAdvisories

Vendor

Qdpm

2 known vulnerabilities.

Products

qdPM 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.2
    CVE-2019-25669

    qdPM 9.1 SQL Injection via search_by_extrafields Parameter

    qdPM 9.1 contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the search_by_extrafields[] parameter. Attackers can send POST requests to the users endpoint with malicious search_by_extrafie…

    Qdpm qdPM
  • High 8.2
    CVE-2018-25208

    qdPM 9.1 SQL Injection via filter_by Parameters

    qdPM 9.1 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through filter_by parameters. Attackers can submit malicious POST requests to the timeReport endpoint with crafted fil…

    Qdpm qdPM