Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: QCubed Component: Qcubed Clear all filters
TI-2020-15239 CVE-2020-24914 · GHSA-7w3c-jgh7-cwjw

A PHP object injection bug in profile.php in qcubed (all versions including 3.1.1)…

Priority MEDIUM 50

A PHP object injection bug in profile.php in qcubed (all versions including 3.1.1) unserializes the untrusted data of the POST-variable "strProfileData" and allows an unauthenticated attacker to execute code via a crafte…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04978 Published 2021-03-04 Fixed in 3.2 CWE-502
TI-2020-15238 CVE-2020-24913 · GHSA-8fj6-pc5r-347q

A SQL injection vulnerability in qcubed (all versions including 3.1.1) in profile.php via…

Priority HIGH 70

A SQL injection vulnerability in qcubed (all versions including 3.1.1) in profile.php via the strQuery parameter allows an unauthenticated attacker to access the database by injecting SQL code via a crafted POST request.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.40886 Published 2021-03-04 Fixed in 3.2 CWE-89