The 'orgID' parameter received by the '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is not sanitized, leading to SQL injection (in particular, a blind time-based type).
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2018-05-31T18:00:00
Updated: 2024-08-05T08:01:52.431Z
Reserved: 2018-05-15T00:00:00
Link: CVE-2018-11136
Vulnrichment
No data.
NVD
Status : Modified
Published: 2018-05-31T18:29:00.450
Modified: 2024-11-21T03:42:43.790
Link: CVE-2018-11136
Redhat
No data.