CVE-2018-19952CWE-20CWE-80CWE-943

If exploited, this SQL injection vulnerability could allow remote attackers to obtain application information

published November 2, 2020

CVSS
—
EPSS
1%
Percentile
69.4
In the wild
Unconfirmed
What it is

If exploited, this SQL injection vulnerability could allow remote attackers to obtain application information. This issue affects: QNAP Systems Inc. Music Station versions prior to 5.1.13; versions prior to 5.2.9; versions prior to 5.3.11.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01267 · 69.4th percentile
Weaknesses
CWE-20 · Improper Input Validation; CWE-80 · Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS); CWE-943 · Improper Neutralization of Special Elements in Data Query Logic
Published
2020-11-02T15:57Z
EPSS history
Timeline
  • 02 NOV 15:57Z
    If exploited, this SQL injection vulnerability could allow remote attackers to obtain application information
    cvelistv5