Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6f3w-7q37-9xgc

Опубликовано: 07 нояб. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 9.5
CVSS3: 9.8

Описание

An SQL injection vulnerability has been reported to affect QuMagie. A remote attacker can exploit the vulnerability to execute unauthorized code or commands.

We have already fixed the vulnerability in the following versions: QuMagie 2.7.0 and later

An SQL injection vulnerability has been reported to affect QuMagie. A remote attacker can exploit the vulnerability to execute unauthorized code or commands.

We have already fixed the vulnerability in the following versions: QuMagie 2.7.0 and later

EPSS

Процентиль: 31%
0.00116
Низкий

9.5 Critical

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 9.8
nvd
3 месяца назад

An SQL injection vulnerability has been reported to affect QuMagie. A remote attacker can exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following versions: QuMagie 2.7.0 and later

CVSS3: 9.8
fstec
3 месяца назад

Уязвимость приложения для хранения мультимедийных файлов QuMagie для QNAP NAS, связанная с непринятием мер по защите структуры запроса SQL, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 31%
0.00116
Низкий

9.5 Critical

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-89