Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rc3j-pp37-x4q5

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection. An authenticated user has the ability to execute arbitrary commands against the database. The affected component is /userui/ticket_list.php, and affected parameters are order[0][column] and order[0][dir].

Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection. An authenticated user has the ability to execute arbitrary commands against the database. The affected component is /userui/ticket_list.php, and affected parameters are order[0][column] and order[0][dir].

EPSS

Процентиль: 57%
0.00358
Низкий

Связанные уязвимости

CVSS3: 8.8
nvd
больше 6 лет назад

Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection. An authenticated user has the ability to execute arbitrary commands against the database. The affected component is /userui/ticket_list.php, and affected parameters are order[0][column] and order[0][dir].

EPSS

Процентиль: 57%
0.00358
Низкий