Exposures › CVE-2020-24913

CVE-2020-24913

Players implicated

Description

A SQL injection vulnerability in qcubed (all versions including 3.1.1) in profile.php via the strQuery parameter allows an unauthenticated attacker to access the database by injecting SQL code via a crafted POST request.

Sentiment · trusted sources

• synthesis severe-fallout -0.80
  Widely condemned for critical SQL injection flaw in all versions
• x.com ↗ severe-fallout -0.90
  Apple accuses OpenAI employee of hacking

  “BREAKING: Apple accuses an OpenAI employee of hacking its systems, downloading unreleased product files, & celebrating the breach as 'so funny.'”

• cooey ↗ severe-fallout -0.90
  Critical vulnerability disclosed

  “A SQL injection vulnerability in qcubed (all versions including 3.1.1) in profile.php via the strQuery parameter allows an unauthenticated attacker to access the database by injecting SQL code via a crafted POST request.”

• www.hipaajournal.com ↗ severe-fallout -0.80
  Accenture confirms intrusion after hacker claims 35GB data breach

  “Accenture Confirms Intrusion After Hacker Claims 35GB Data Breach”

• dailysecurityreview.com ↗ severe-fallout -0.80
  Critical RCE flaw exposed 84,000 servers

  “Over 84,000 Roundcube webmail servers remain exposed to a critical RCE flaw (CVE-2025-49113) despite a June 2025 patch fixing the vulnerability.”

• BleepingComputer ↗ severe-fallout -0.70
  Exploited by hackers

  “Hackers exploit Roundcube flaw to spy on academic researchers”

• BleepingComputer ↗ severe-fallout -0.60
  AI agent vulnerability disclosed

  “'Ghostcommit' hides prompt injection in images to fool AI agents, steal secrets”

• www.cvefind.com ↗ severe-fallout -0.50
  Listed as critical vulnerability

  “CVE 2020-24913 is a critical vulnerability in qcubed.”

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.