GHSA-8fj6-pc5r-347qCriticalCVSS 9.8

qcubed SQL injection vulnerability in profile.php via the strQuery parameter

Published
May 24, 2022
Last Modified
April 24, 2024

🔗 CVE IDs covered (1)

CVE-2020-24913 →

📋 Description

A SQL injection vulnerability in qcubed (all versions including 3.1.1) in profile.php via the strQuery parameter allows an unauthenticated attacker to access the database by injecting SQL code via a crafted POST request.

🎯 Affected products1

  • composer/qcubed/qcubed:<= 3.1.1

🔗 References (8)