CVE-2018-11145

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 3 of 46...

CVE-2018-11145

CVE-2018-11145 affects Quest DR Series Disk Backup Software 4.x prior to 4.0.3.1, enabling command injection via exposed web/JSON‑RPC interfaces. CORE CORE-2018-0002 details multiple command‑injection vectors across DRSeries RPC methods, including login, user management, container/storage actions...