The 'orgID' parameter received by the '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is not sanitized, leading to SQL injection (in particular, a blind time-based type).
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2018-05-31T18:00:00

Updated: 2024-08-05T08:01:52.431Z

Reserved: 2018-05-15T00:00:00

Link: CVE-2018-11136

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2018-05-31T18:29:00.450

Modified: 2024-11-21T03:42:43.790

Link: CVE-2018-11136

cve-icon Redhat

No data.