CVE-2018-11146

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 4 of 46...

CVE-2018-11146

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 4 of 46...

CVE-2018-11146

Affected product: Quest DR Series Disk Backup Software. Vulnerabilities allow remote command execution via several web/API entry points; notably, command injection in update_pw and setAdminPassword. Versions prior to 4.0.3.1 are implicated. Build 4.0.3.1 reportedly fixes these issues. If upgradin...