Skip to content

Known CVE

QloApps 1.6.0 - SQL Injection

An unauthenticated Time-Based SQL injection found in Webkul QloApps 1.6.0 via GET parameters date_from, date_to, and id_product allows a remote attacker to retrieve the contents of an entire database.

CVE-2023-36284

High2023CVSS 7.5CWE-89

time-based-sqli · cve2023 · qloapps · sqli · webkul · vuln

Verified scans run this check after you prove you own the site.

All known CVEsView the checks catalogNational Vulnerability Database

Scan a website