v_qrs vulnerabilities

2 known vulnerabilities in v_qrs from Vaales Technologies. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  v_qrs: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2024-24313May 1, 2024Vaales Technologies

  An issue in Vaales Technologies V_QRS v.2024-01-17 allows a remote attacker to obtain sensitive information via the Models/FormModel.php and QRModel.php component.

• 7.5 High severity

  v_qrs: Authorization Bypass Through User-Controlled Key

  CVE-2024-24312May 1, 2024Vaales Technologies

  SQL injection vulnerability in Vaales Technologies V_QRS v.2024-01-17 allows a remote attacker to obtain sensitive information via the Models/UserModel.php component.