Qdpm CVEs & Vulnerabilities

1 CVEs affecting Qdpm products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

qdpm 1

CVE-2019-25669HIGH

qdPM 9.1 contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the search_by_extrafields[] parameter. Attackers can send POST requests to the users endpoint with malicious search_by_extrafields[] values to trigger SQL syntax errors and extract database information.

6 Apr 2026

8.2

CVSS

← PrevPage 1 / 1Next →

← All Vendors·CVE Database