CVE-2018-11184

CVE-2018-11184 affects Quest DR Series Disk Backup Software up to build 4.0.3.1, where the UsageService’s get usage operation can be abused to inject commands via the type parameter (as shown in the 7.42 example). The vulnerability arises from unsanitized user input used to construct a command li...

CVE-2018-11184

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 42 of 46...