Lucene search

K
osvGoogleOSV:CVE-2020-13448
HistoryJun 01, 2020 - 4:15 p.m.

CVE-2020-13448

2020-06-0116:15:14
Google
osv.dev
2

8 High

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

85.2%

QuickBox Community Edition through 2.5.5 and Pro Edition through 2.1.8 allows an authenticated remote attacker to execute code on the server via command injection in the servicestart parameter.

CPENameOperatorVersion
qbeq2.5.0
qbeq2.5.3
qbeq2.5.4
qbeq2.5.1
qbeq2.5.2
qbeq2.5.5
qbeq2.4.9

8 High

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

85.2%