Lucene search
PRIOn knowledge basePRION:CVE-2014-1671HistoryJan 26, 2014 - 1:55 a.m.
Sql injection
2014-01-2601:55:00
PRIOn knowledge base
www.prio-n.com
1
Multiple SQL injection vulnerabilities in Dell KACE K1000 5.4.76847 and possibly earlier allow remote attackers or remote authenticated users to execute arbitrary SQL commands via the macAddress element in a (1) getUploadPath or (2) getKBot SOAP request to service/kbot_service.php; the ID parameter to (3) userui/advisory_detail.php or (4) userui/ticket.php; and the (5) ORDER[] parameter to userui/ticket_list.php.
| CPE | Name | Operator | Version |
|---|---|---|---|
| kace_k1000_systems_management_appliance_software | eq | 5.4.76847 |
Related
openvas
openvas
cve
cve
CVE-2014-1671
2014-01-26 01:55:20
nessus
nessus
Dell KACE K1000 < 5.5 Multiple SQL Injection Vulnerabilities
2014-02-07 00:00:00
cvelist
cvelist
CVE-2014-1671
2014-01-26 01:00:00
nvd
nvd
CVE-2014-1671
2014-01-26 01:55:20
seebug
seebug
Dell KACE K1000 advisory_detail.php/ticket_list.php/ticket.php脚本SQL注入漏洞
2014-02-10 00:00:00