Vulnerabilities

TI-2021-19726 CVE-2021-43970 · GHSA-mhp3-xpmp-cp9p

An arbitrary file upload vulnerability exists in albumimages.jsp in Quicklert for Digium…

MEDIUM 42

An arbitrary file upload vulnerability exists in albumimages.jsp in Quicklert for Digium 10.0.0 (1043) via a .mp3;.jsp filename for a file that begins with audio data bytes.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01777 Published 2022-03-07 No fix listed CWE-434

TI-2021-19725 CVE-2021-43969 · GHSA-3f5q-7p2j-3w5g

The login.jsp page of Quicklert for Digium 10.0.0 (1043) is affected by both Blind SQL…

LOW 32

The login.jsp page of Quicklert for Digium 10.0.0 (1043) is affected by both Blind SQL Injection with Out-of-Band Interaction (DNS) and Blind Time-Based SQL Injections.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01508 Published 2022-03-07 No fix listed CWE-89

Vulnerabilities

Filters

An arbitrary file upload vulnerability exists in albumimages.jsp in Quicklert for Digium…

The login.jsp page of Quicklert for Digium 10.0.0 (1043) is affected by both Blind SQL…