114 matches found
MunkiReport Cross-Site Scripting (XSS) Filter Bypass On Comment
A Cross-Site Scripting XSS vulnerability in the comment module before 4.0 for MunkiReport allows remote attackers to inject arbitrary web script or HTML by posting a new comment...
GHSA-79XR-V794-WQ35 MunkiReport Managed Installs module Reflected Cross-Site Scripting (XSS) vulnerability
A Cross-Site Scripting XSS vulnerability in the managedinstalls module before 2.6 for MunkiReport allows remote attackers to inject arbitrary web script or HTML via the last two URL parameters through which installed packages names and versions are reported...
MunkiReport Managed Installs module Reflected Cross-Site Scripting (XSS) vulnerability
A Cross-Site Scripting XSS vulnerability in the managedinstalls module before 2.6 for MunkiReport allows remote attackers to inject arbitrary web script or HTML via the last two URL parameters through which installed packages names and versions are reported...
GHSA-4QGH-M9VP-48XP MunkiReport Software Update module is vulnerable to SQL injection
A SQL injection vulnerability in softwareupdatecontroller.php in the Software Update module before 1.6 for MunkiReport allows attackers to execute arbitrary SQL commands via the last URL parameter of the /module/softwareupdate/gettabdata/ endpoint...
MunkiReport reportdata module SQL injection vulnerability
A SQL injection vulnerability in reportdatacontroller.php in the reportdata module before 3.5 for MunkiReport allows attackers to execute arbitrary SQL commands via the req parameter of the /module/reportdata/ip endpoint...
GHSA-X9Q4-5F3C-CW62 MunkiReport munki_facts module Cross-Site Scripting (XSS) vulnerability
A Cross-Site Scripting XSS vulnerability in the munkifacts aka Munki Conditions module before 1.5 for MunkiReport allows remote attackers to inject arbitrary web script or HTML via the key name...
GHSA-VC4F-2G7F-PMQR MunkiReport Cross-Site Scripting (XSS) Filter Bypass On Comment
A Cross-Site Scripting XSS vulnerability in the comment module before 4.0 for MunkiReport allows remote attackers to inject arbitrary web script or HTML by posting a new comment...
GHSA-QVW9-6567-WQ78 MunkiReport reportdata module SQL injection vulnerability
A SQL injection vulnerability in reportdatacontroller.php in the reportdata module before 3.5 for MunkiReport allows attackers to execute arbitrary SQL commands via the req parameter of the /module/reportdata/ip endpoint...
Munkireport Software Update SQL Injection Vulnerability
Munkireport is a reporting tool for the Munki software management program.Software Update is one of the software update modules. An SQL injection vulnerability exists in the softwareupdatecontroller.php file in MunkiReport for Software Update versions prior to 1.6. The vulnerability can be...
Munkireport comment cross-site scripting vulnerability
Munkireport is a reporting tool for the Munki software management program. comment is one of the comment modules. A cross-site scripting vulnerability exists in MunkiReport for comments prior to version 4.0. A remote attacker can exploit this vulnerability by posting a new comment to inject...
Munkireport munki_facts Cross-Site Scripting Vulnerability
Munkireport is a reporting tool for the Munki software management program. munkifacts is one of the custom data modules. A cross-site scripting vulnerability exists in munkifacts in MunkiReport prior to version 1.5. A remote attacker can exploit this vulnerability to inject arbitrary web script o...
MunkiReport SQL Injection Vulnerability (CNVD-2020-42246)
Munkireport is a reporting tool for the Munki software management program. A SQL injection vulnerability exists in the TableQuery.php file in MunkiReport versions prior to 5.6.3. The vulnerability can be exploited by an attacker to execute arbitrary SQL commands by sending a POST request to...
MunkiReport Cross-Site Request Forgery Vulnerability
Munkireport is a reporting tool for the Munki software management program. A cross-site request forgery vulnerability exists in manager/deletemachine/id in MunkiReport versions prior to 5.6.3. An attacker could exploit this vulnerability to delete arbitrary devices from the MunkiReport database...
CVE-2020-15887
A SQL injection vulnerability in softwareupdatecontroller.php in the Software Update module before 1.6 for MunkiReport allows attackers to execute arbitrary SQL commands via the last URL parameter of the /module/softwareupdate/gettabdata/ endpoint...
CVE-2020-15884
A SQL injection vulnerability in TableQuery.php in MunkiReport before 5.6.3 allows attackers to execute arbitrary SQL commands via the order0dir field on POST requests to /datatables/data...
CVE-2020-15881
A Cross-Site Scripting XSS vulnerability in the munkifacts aka Munki Conditions module before 1.5 for MunkiReport allows remote attackers to inject arbitrary web script or HTML via the key name...
CVE-2020-15886
A SQL injection vulnerability in reportdatacontroller.php in the reportdata module before 3.5 for MunkiReport allows attackers to execute arbitrary SQL commands via the req parameter of the /module/reportdata/ip endpoint...
CVE-2020-15887
A SQL injection vulnerability in softwareupdatecontroller.php in the Software Update module before 1.6 for MunkiReport allows attackers to execute arbitrary SQL commands via the last URL parameter of the /module/softwareupdate/gettabdata/ endpoint...
CVE-2020-15883
A Cross-Site Scripting XSS vulnerability in the managedinstalls module before 2.6 for MunkiReport allows remote attackers to inject arbitrary web script or HTML via the last two URL parameters through which installed packages names and versions are reported...