CVE-2020-13448

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2020-13448

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-13448.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2020-13448

Published

2020-06-01T16:15:14.323Z

Modified

2026-07-08T05:53:54.459011818Z

Severity

8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

QuickBox Community Edition through 2.5.5 and Pro Edition through 2.1.8 allows an authenticated remote attacker to execute code on the server via command injection in the servicestart parameter.

Database specific

{
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "last_affected": "2.1.8"
                }
            ],
            "source": "CPE_RANGE",
            "vendor_product": "quickbox:quickbox",
            "cpes": [
                "cpe:2.3:a:quickbox:quickbox:*:*:*:*:pro:*:*:*"
            ]
        }
    ]
}

References

Affected packages

Git / github.com/quickbox/qb

Affected ranges

Type

GIT

Repo

https://github.com/quickbox/qb

Events

Introduced

Last affected

b99ac42888e5dcc8a879ed42a87a65b2dc244bf4

Database specific

Show details

{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.5.5"
        }
    ],
    "source": "CPE_RANGE",
    "cpe": "cpe:2.3:a:quickbox:quickbox:*:*:*:*:community:*:*:*"
}

Affected versions

v2.*

v2.4.9

v2.5.0

v2.5.1

v2.5.5

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-13448.json"