CVE-2020-24913

Publicada em 04 mar 2021 · Atualizada em 09 jul 2026

Seguir esta CVE + Monitorar qcubed/qcubed

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

15Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 41%

A SQL injection vulnerability in qcubed (all versions including 3.1.1) in profile.php via the strQuery parameter allows an unauthenticated attacker to access the database by injecting SQL code via a crafted POST request.

Produtos afetados

n/a · n/a

Referências

http://packetstormsecurity.com/files/161759/QCubed-3.1.1-SQL-Injection.html http://seclists.org/fulldisclosure/2021/Mar/29 http://seclists.org/fulldisclosure/2021/Mar/30 https://tech.feedyourhead.at/content/QCubed-SQL-Injection-CVE-2020-24913 https://www.ait.ac.at/themen/cyber-security/pentesting/security-advisories/ait-sa-20210215-02