(0Day) Quest NetVault Backup Server checksession Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on vulnerable installations of Quest NetVault Backup. The specific flaw exists within JSON RPC Request handling. By setting the checksession parameter to a specific value, it is possible to bypass authentication to critical...

(0Day) Quest NetVault Backup Process Manager Service Multipart Boundary Header Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup. Authentication is not required to exploit this vulnerability. The specific flaw exists within nvwsworker.exe. When parsing the boundary header of a multipart request, the...

(0Day) Quest NetVault Backup Server Process Manager Service Export Method Directory Traversal Denial of Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on vulnerable installations of Quest NetVault Backup. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be easily bypassed. The specific flaw exists within...

Quest NetVault Backup Server Process Manager Service NVBUJobDefinitions Get Method SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUJobDefinitions Get method requests. The issue results from t...

Quest NetVault Backup SQL Injection Vulnerability (CNVD-2017-37636)

Quest NetVault Backup is a suite of data backup software from Quest Software, USA. A SQL injection vulnerability in the handling of NVBUSourceDeviceSet Get method requests in Quest NetVault Backup versions prior to 11.4.5 stems from the program's failure to properly detect user-submitted strings...

Quest NetVault Backup SQL Injection Vulnerability (CNVD-2017-37642)

Quest NetVault Backup is a suite of data backup software from Quest Software, USA. A SQL injection vulnerability in the handling of NVBUTransferHistory Get method requests in Quest NetVault Backup versions prior to 11.4.5 stems from the program's failure to properly detect user-submitted strings...

Quest NetVault Backup SQL Injection Vulnerability (CNVD-2017-37637)

Quest NetVault Backup is a suite of data backup software from Quest Software, USA. A SQL injection vulnerability in the handling of NVBUSelectionSet Get method requests in Quest NetVault Backup versions prior to 11.4.5 stems from the program's failure to properly detect user-submitted strings pri...

Quest NetVault Backup SQL Injection Vulnerability (CNVD-2017-37641)

Quest NetVault Backup is a suite of data backup software from Quest Software, USA. A SQL injection vulnerability in the handling of NVBUJobCountHistory Get method requests in Quest NetVault Backup versions prior to 11.4.5 stems from the program's failure to properly inspect user-submitted strings...

Quest NetVault Backup SQL Injection Vulnerability (CNVD-2017-37644)

Quest NetVault Backup is a suite of data backup software from Quest Software, USA. A SQL injection vulnerability in the handling of NVBUPhaseStatus Acknowledge method requests in Quest NetVault Backup versions prior to 11.4.5 stems from the program's failure to properly inspect user-submitted...

Quest NetVault Backup SQL Injection Vulnerability (CNVD-2017-37632)

Quest NetVault Backup is a suite of data backup software from Quest Software, USA. A SQL injection vulnerability in the handling of NVBUScheduleSet Get method requests in Quest NetVault Backup versions prior to 11.4.5 stems from the program's failure to properly detect user-submitted strings prio...

Quest NetVault Backup 'NVBUJobHistory Get' Method SQL Injection Vulnerability

Quest NetVault Backup is a suite of data backup software from Quest Software, USA. A SQL injection vulnerability in the handling of NVBUJobHistory Get method requests in Quest NetVault Backup versions prior to 11.4.5 stems from the program's failure to properly detect user-submitted strings prior...

Quest NetVault Backup SQL Injection Vulnerability (CNVD-2017-37631)

Quest NetVault Backup is a suite of data backup software from Quest Software, USA. A SQL injection vulnerability exists in the handling of GET method requests in versions of Quest NetVault Backup prior to 11.4.5, which stems from the program failing to properly detect user-submitted strings prior...

Quest NetVault Backup SQL Injection Vulnerability (CNVD-2017-37634)

Quest NetVault Backup is a suite of data backup software from Quest Software, USA. A SQL injection vulnerability in the handling of NVBUBackup ClientList method requests in Quest NetVault Backup versions prior to 11.4.5 stems from the program's failure to properly detect user-submitted strings...

Quest NetVault Backup 'NVBUJobDefinitions Get' Method SQL Injection Vulnerability

Quest NetVault Backup is a suite of data backup software from Quest Software, USA. A SQL injection vulnerability exists in the handling of NVBUJobDefinitions Get method requests in Quest NetVault Backup, which stems from the program failing to properly detect user-submitted strings before using S...

Quest NetVault Backup SQL Injection Vulnerability (CNVD-2017-37633)

Quest NetVault Backup is a suite of data backup software from Quest Software, USA. A SQL injection vulnerability in the handling of NVBUBackup PluginList method requests in Quest NetVault Backup versions prior to 11.4.5 stems from the program's failure to properly detect user-submitted strings...

Quest NetVault Backup SQL Injection Vulnerability (CNVD-2017-37643)

Quest NetVault Backup is a suite of data backup software from Quest Software, USA. A SQL injection vulnerability in the handling of NVBUPolicy Get method requests in Quest NetVault Backup versions prior to 11.4.5 stems from the program failing to properly detect user-submitted strings prior to th...

Quest NetVault Backup SQL Injection Vulnerability (CNVD-2017-37645)

Quest NetVault Backup is a suite of data backup software from Quest Software, USA. A SQL injection vulnerability in the handling of NVBUPhaseStatus GetPlugins method requests in Quest NetVault Backup versions prior to 11.4.5 stems from the program's failure to properly inspect user-submitted...

Quest NetVault Backup SQL Injection Vulnerability

Quest NetVault Backup is a suite of data backup software from Quest Software, USA. A SQL injection vulnerability in the handling of NVBUBackup JobList method requests in Quest NetVault Backup versions prior to 11.4.5 stems from the program's failure to properly detect user-submitted strings prior...

Quest NetVault Backup SQL Injection Vulnerability (CNVD-2017-37629)

Quest NetVault Backup is a suite of data backup software from Quest Software, USA. A SQL injection vulnerability in the handling of NVBUBackupSegment Get method requests in Quest NetVault Backup versions prior to 11.4.5 stems from the program's failure to properly detect user-submitted strings...

Quest NetVault Backup SQL Injection Vulnerability (CNVD-2017-37640)

Quest NetVault Backup is a suite of data backup software from Quest Software, USA. A SQL injection vulnerability in the handling of NVBUBackupTargetSet Get method requests in Quest NetVault Backup versions prior to 11.4.5 stems from the program's failure to properly inspect user-submitted strings...