high8.8
CVE-2020-15947
A SQL injection vulnerability in the qm_adm/qm_export_stats_run.do endpoint of Loway QueueMetrics before 19.10.21 allows remote authenticated users to execute …
Impact
A SQL injection vulnerability in the qm_adm/qm_export_stats_run.do endpoint of Loway QueueMetrics before 19.10.21 allows remote authenticated users to execute arbitrary SQL commands via the exportId parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Loway | Queuemetrics | before 19.10.21 |