CVE-2018-11136

2018-05-31T18:29:00
ID CVE-2018-11136
Type cve
Reporter cve@mitre.org
Modified 2018-06-29T18:50:00

Description

The 'orgID' parameter received by the '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is not sanitized, leading to SQL injection (in particular, a blind time-based type).