Design/Logic Flaw

2020-04-1619:15:00

PRIOn knowledge base

www.prio-n.com

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.2%

A Host Header Injection vulnerability in qdPM 9.1 may allow an attacker to spoof a particular header and redirect users to malicious websites.

CPENameOperatorVersion
qdpmeq9.1

CPE	Name	Operator	Version
	qdpm	eq	9.1

References

fatihhcelik.blogspot.com/2020/01/qdpm-web-based-project-management_11.html