CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-15947

A SQL injection vulnerability in the qm_adm/qm_export_stats_run.do endpoint of Loway QueueMetrics before 19.10.21 allows remote authenticated users to execute arbitrary SQL commands via the exportId parameter.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 60.5%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 6.5

References

Products affected by CVE-2020-15947

Loway » Queuemetrics » Version: N/A

cpe:2.3:a:loway:queuemetrics:-
Loway » Queuemetrics » Version: 12.01

cpe:2.3:a:loway:queuemetrics:12.01
Loway » Queuemetrics » Version: 12.02

cpe:2.3:a:loway:queuemetrics:12.02
Loway » Queuemetrics » Version: 12.05

cpe:2.3:a:loway:queuemetrics:12.05
Loway » Queuemetrics » Version: 12.10

cpe:2.3:a:loway:queuemetrics:12.10
Loway » Queuemetrics » Version: 13.04

cpe:2.3:a:loway:queuemetrics:13.04
Loway » Queuemetrics » Version: 13.12

cpe:2.3:a:loway:queuemetrics:13.12
Loway » Queuemetrics » Version: 14.03

cpe:2.3:a:loway:queuemetrics:14.03
Loway » Queuemetrics » Version: 14.06

cpe:2.3:a:loway:queuemetrics:14.06
Loway » Queuemetrics » Version: 14.10

cpe:2.3:a:loway:queuemetrics:14.10
Loway » Queuemetrics » Version: 15.02

cpe:2.3:a:loway:queuemetrics:15.02
Loway » Queuemetrics » Version: 15.10

cpe:2.3:a:loway:queuemetrics:15.10
Loway » Queuemetrics » Version: 16.09

cpe:2.3:a:loway:queuemetrics:16.09
Loway » Queuemetrics » Version: 17.06

cpe:2.3:a:loway:queuemetrics:17.06
Loway » Queuemetrics » Version: 17.06.1

cpe:2.3:a:loway:queuemetrics:17.06.1
Loway » Queuemetrics » Version: 18.04

cpe:2.3:a:loway:queuemetrics:18.04
Loway » Queuemetrics » Version: 19.04

cpe:2.3:a:loway:queuemetrics:19.04
Loway » Queuemetrics » Version: 19.04.1

cpe:2.3:a:loway:queuemetrics:19.04.1
Loway » Queuemetrics » Version: 19.10

cpe:2.3:a:loway:queuemetrics:19.10

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-15947

Products

Pricing

Contact Us