← Back to browse · API

CVE-2020-24913

Severity
CRITICAL
CVSS
9.8
EPSS
0.40621
Risk score
53.42
CISA KEV
No
PoC
No
Published
2021-03-04
Modified
2026-07-09
First seen
2026-08-05
Aliases
EUVD-2022-3170, GHSA-8FJ6-PC5R-347Q
Products
n/a:n/a n/a, qcubed:qcubed
Sources
nvd CVE-2020-24913
euvd EUVD-2022-3170

Description

A SQL injection vulnerability in qcubed (all versions including 3.1.1) in profile.php via the strQuery parameter allows an unauthenticated attacker to access the database by injecting SQL code via a crafted POST request.

References