CyberSecBulletin

Qinguoyi vulnerabilities

We track 3 vulnerabilities in Qinguoyi products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on April 4, 2025.

3vulnerabilities
2critical
1high
0exploited
9.5average CVSS score

Latest Qinguoyi vulnerabilities

  • 9.8 Critical severity

    TinyWebServer: Improper Authentication

    CVE-2025-3268Qinguoyi

    A vulnerability has been found in qinguoyi TinyWebServer up to 1.0 and classified as critical. This vulnerability affects unknown code of the file http/http_conn.cpp. The manipulation of the argument m_url_real leads to improper authentication. The attack can

  • 8.8 High severity

    TinyWebServer: Improper Neutralization of Special Elements used in an SQL Command

    CVE-2025-3267Qinguoyi

    A vulnerability, which was classified as critical, was found in qinguoyi TinyWebServer up to 1.0. This affects an unknown part of the file /http/http_conn.cpp. The manipulation of the argument name/password leads to sql injection. It is possible to initiate th

  • 9.8 Critical severity

    TinyWebServer: Out-of-bounds Write

    CVE-2025-3266Qinguoyi

    A vulnerability, which was classified as critical, has been found in qinguoyi TinyWebServer up to 1.0. Affected by this issue is some unknown functionality of the file /http/http_conn.cpp. The manipulation of the argument name/password leads to stack-based buf