GHSA-QVW9-6567-WQ78 MunkiReport reportdata module SQL injection vulnerability

A SQL injection vulnerability in reportdatacontroller.php in the reportdata module before 3.5 for MunkiReport allows attackers to execute arbitrary SQL commands via the req parameter of the /module/reportdata/ip endpoint...

CVE-2020-15886

A SQL injection vulnerability in reportdatacontroller.php in the reportdata module before 3.5 for MunkiReport allows attackers to execute arbitrary SQL commands via the req parameter of the /module/reportdata/ip endpoint...

PT-2020-14687

Name of the Vulnerable Software and Affected Versions MunkiReport versions prior to 3.5 Description A SQL injection issue in the reportdata module allows attackers to execute arbitrary SQL commands. This is achieved by manipulating the req parameter of the "/module/reportdata/ip" endpoint...