Skip to content
OpenAdvisories
Unscored CVE-2020-15947 EUVD-2020-7918GHSA-74g8-qm3r-62cr

A SQL injection vulnerability in the qm_adm/qm_export_stats_run.do endpoint of Loway QueueMetrics before 19.10.21 allows remote authenticat…

Published Aug 13, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

A SQL injection vulnerability in the qm_adm/qm_export_stats_run.do endpoint of Loway QueueMetrics before 19.10.21 allows remote authenticated users to execute arbitrary SQL commands via the exportId parameter.

References