Threats tagged 'ghsa-9jrh-6qjc-j6p4'

Quipux versions from 4.0.1 through commit e1774ac contain multiple SQL injection vulnerabilities exploitable by authenticated users via various PHP scripts and parameters. These vulnerabilities allow attackers to execute arbitrary SQL commands, potentially leading to full compromise of confidentiality, integrity, and availability of the affected system. The CVSS score of 9.9 indicates critical severity.