Vulnerabilities > Loway > Queuemetrics > 19.10
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2024-09-08 | CVE-2024-42343 | Information Exposure Through Discrepancy vulnerability in Loway Queuemetrics Loway - CWE-204: Observable Response Discrepancy | 7.5 |
2020-08-13 | CVE-2020-15947 | SQL Injection vulnerability in Loway Queuemetrics A SQL injection vulnerability in the qm_adm/qm_export_stats_run.do endpoint of Loway QueueMetrics before 19.10.21 allows remote authenticated users to execute arbitrary SQL commands via the exportId parameter. | 8.8 |
2020-08-13 | CVE-2020-15925 | SQL Injection vulnerability in Loway Queuemetrics A SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.10.21 allows remote authenticated attackers to execute arbitrary SQL commands via the TPF_XPAR1 parameter. | 8.8 |