CVE-2020-15883

A Cross-Site Scripting XSS vulnerability in the managedinstalls module before 2.6 for MunkiReport allows remote attackers to inject arbitrary web script or HTML via the last two URL parameters through which installed packages names and versions are reported...

CVE-2020-15883

CVE-2020-15883 concerns a reflected XSS in the MunkiReport project, specifically in the managedinstalls module prior to version 2.6. The vulnerability arises because the last two URL parameters reporting installed package names and versions can be manipulated to inject arbitrary web script or HTM...

CVE-2020-15883

A Cross-Site Scripting XSS vulnerability in the managedinstalls module before 2.6 for MunkiReport allows remote attackers to inject arbitrary web script or HTML via the last two URL parameters through which installed packages names and versions are reported...

CVE-2020-15884

A SQL injection vulnerability in TableQuery.php in MunkiReport before 5.6.3 allows attackers to execute arbitrary SQL commands via the order0dir field on POST requests to /datatables/data...

CVE-2020-15884

A SQL injection vulnerability in TableQuery.php in MunkiReport before 5.6.3 allows attackers to execute arbitrary SQL commands via the order0dir field on POST requests to /datatables/data...

CVE-2020-15884

The CVE-2020-15884 entry concerns MunkiReport (TableQuery.php) with a SQL injection in versions before 5.6.3. The vulnerability allows an attacker to execute arbitrary SQL commands by manipulating the order[0][dir] field in POST requests to /datatables/data. Affected component is MunkiReport.php’...

CVE-2020-15885

This CVE concerns MunkiReport’s comment module prior to version 4.0, where a Cross-Site Scripting (XSS) vulnerability exists. The issue allows remote attackers to inject arbitrary web script or HTML by posting a new comment, with the potential to affect users who view comments. The available conn...

CVE-2020-15885

A Cross-Site Scripting XSS vulnerability in the comment module before 4.0 for MunkiReport allows remote attackers to inject arbitrary web script or HTML by posting a new comment...

CVE-2020-15885

A Cross-Site Scripting XSS vulnerability in the comment module before 4.0 for MunkiReport allows remote attackers to inject arbitrary web script or HTML by posting a new comment...

CVE-2020-15886

MunkiReport’s reportdata module (reportdata_controller.php) is vulnerable to SQL injection before version 3.5 via the req parameter to /module/reportdata/ip. The issue allows attackers to execute arbitrary SQL commands. Exploitation details are not provided beyond this vector in the supplied docu...

CVE-2020-15886

A SQL injection vulnerability in reportdatacontroller.php in the reportdata module before 3.5 for MunkiReport allows attackers to execute arbitrary SQL commands via the req parameter of the /module/reportdata/ip endpoint...

CVE-2020-15886

A SQL injection vulnerability in reportdatacontroller.php in the reportdata module before 3.5 for MunkiReport allows attackers to execute arbitrary SQL commands via the req parameter of the /module/reportdata/ip endpoint...

CVE-2020-15887

A SQL injection vulnerability in softwareupdatecontroller.php in the Software Update module before 1.6 for MunkiReport allows attackers to execute arbitrary SQL commands via the last URL parameter of the /module/softwareupdate/gettabdata/ endpoint...

CVE-2020-15887

CVE-2020-15887 affects MunkiReport’s Software Update module (versions before 1.6). The vulnerability is a SQL injection in softwareupdate_controller.php, exploitable via the last URL parameter of the /module/softwareupdate/get_tab_data/ endpoint, allowing arbitrary SQL commands. The provided docu...

CVE-2020-15887

A SQL injection vulnerability in softwareupdatecontroller.php in the Software Update module before 1.6 for MunkiReport allows attackers to execute arbitrary SQL commands via the last URL parameter of the /module/softwareupdate/gettabdata/ endpoint...

PT-2020-14688

Name of the Vulnerable Software and Affected Versions MunkiReport Software Update module versions prior to 1.6 Description A SQL injection issue in the softwareupdate controller.php file allows attackers to execute arbitrary SQL commands via the last URL parameter of the "/module/softwareupdate/g...

CVE-2020-15885: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting XSS vulnerability in the comment module before 4.0 for MunkiReport allows remote attackers to inject arbitrary web script or HTML by posting a new comment...

PT-2020-14686

Name of the Vulnerable Software and Affected Versions MunkiReport versions prior to 4.0 Description A Cross-Site Scripting XSS issue exists in the comment module, allowing remote attackers to inject arbitrary web script or HTML by posting a new comment. Recommendations For versions prior to 4.0,...

CVE-2020-15886: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in reportdatacontroller.php in the reportdata module before 3.5 for MunkiReport allows attackers to execute arbitrary SQL commands via the req parameter of the /module/reportdata/ip endpoint...

CVE-2020-15881: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting XSS vulnerability in the munkifacts aka Munki Conditions module before 1.5 for MunkiReport allows remote attackers to inject arbitrary web script or HTML via the key name...