{"action":"Upgrade qcubed/qcubed to 3.2 or later.","affected":[{"fixed":"3.2","introduced":"0"}],"component":"qcubed/qcubed","cve_ids":["CVE-2020-24913"],"ecosystem":"Packagist","epss":0.40886,"exploited":false,"fixed_versions":["3.2"],"ghsa_id":"GHSA-8fj6-pc5r-347q","id":"tcs_01M5KEYZGNMBBQ0E2Y383PVENV","modified_at":"2024-04-24T18:28:59.121194Z","published_at":"2022-05-24T17:43:36Z","references":["https://osv.dev/vulnerability/GHSA-8fj6-pc5r-347q","https://nvd.nist.gov/vuln/detail/CVE-2020-24913","https://github.com/qcubed/qcubed/pull/1320/files","https://github.com/qcubed/qcubed","https://tech.feedyourhead.at/content/QCubed-SQL-Injection-CVE-2020-24913","https://www.ait.ac.at/themen/cyber-security/pentesting/security-advisories/ait-sa-20210215-02","http://qcubed.com","http://seclists.org/fulldisclosure/2021/Mar/29","http://seclists.org/fulldisclosure/2021/Mar/30"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-8fj6-pc5r-347q","url":"https://osv.dev/vulnerability/GHSA-8fj6-pc5r-347q"}],"summary":"qcubed SQL injection vulnerability in profile.php via the strQuery parameter"}