← All advisories

Medium severity5.4NVD Advisory· Published Apr 16, 2020· Updated Jun 17, 2026

CVE-2020-11814

CVE-2020-11814

Description

A Host Header Injection vulnerability in qdPM 9.1 may allow an attacker to spoof a particular header and redirect users to malicious websites.

Affected products

3

Qdpm/Qdpm2 versions
cpe:2.3:a:qdpm:qdpm:9.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:qdpm:qdpm:9.1:*:*:*:*:*:*:*
- (no CPE)range: =9.1
qdPM/qdPMdescription

Patches

Vulnerability mechanics

References

1

fatihhcelik.blogspot.com/2020/01/qdpm-web-based-project-management_11.htmlnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.