Sql injection

2024-01-2219:15:00

PRIOn knowledge base

www.prio-n.com

quest analytics llc

remote attacker

arbitrary code

crafted request

common.svc wsdl page

nvd

9.1 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

65.6%

JSON

SQL Injection vulnerability in Quest Analytics LLC IQCRM v.2023.9.5 allows a remote attacker to execute arbitrary code via a crafted request to the Common.svc WSDL page.

CPENameOperatorVersion
iqcrmeq2023.9.5

CPE	Name	Operator	Version
	iqcrm	eq	2023.9.5

References

github.com/el-dud3rino/CVE-Disclosures/blob/main/Quest%20Analytics%20IQCRM/Proof%20of%20Concept

github.com/el-dud3rino/CVE-Disclosures/blob/main/README.md

www.quest-analytics.com/