Описание
A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network.
We have already fixed the vulnerability in the following version: QuMagie 2.2.1 and later
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
EPSS
3.5 Low
CVSS3
8.8 High
CVSS3
Дефекты
Связанные уязвимости
A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.2.1 and later
Уязвимость приложения для хранения мультимедийных файлов QuMagie для QNAP NAS, связанная с непринятием мер по защите структуры запроса SQL, позволяющая нарушителю выполнить произвольный код
EPSS
3.5 Low
CVSS3
8.8 High
CVSS3