All packages
qdPM 8.3 vulnerabilities
3 known CVE vulnerabilities in qdPM 8.3, translated and rated.
- CVE-2015-3884High
qdPM 8.3 has an unrestricted file upload vulnerability that allows remote attackers to execute arbitrary code by uploading a file with an executable extension.
- CVE-2015-3881High
A vulnerability in qdPM 8.3 allows remote attackers to obtain sensitive information via a direct request to specific configuration and log files.
- CVE-2019-25669High
qdPM 9.1 is vulnerable to SQL injection via the search_by_extrafields[] parameter. An attacker can manipulate database queries by sending crafted POST requests to the users endpoint, leading to data exfiltration.