Qcubed: community verdicts

1 notable / known-exploited Qcubed CVE the community has triaged.

ⓘ Not an exhaustive list: we focus on the findings that matter (exploited / notable). For every Qcubed CVE, see NVD ↗.

CVE-2020-24913CRIT 9.8EPSS 41%
A SQL injection vulnerability in qcubed (all versions including 3.1.1) in profile.php via the strQuery parameter allows an unauthenticated attacker to access the database by injecting SQL code via a crafted POST request.