CVE-2019-20504

service/krashrpt.php in Quest KACE K1000 Systems Management Appliance before 6.4 SP3 6.4.120822 allows a remote attacker to execute code via shell metacharacters in the kuid parameter...

CVE-2019-20504

service/krashrpt.php in Quest KACE K1000 Systems Management Appliance before 6.4 SP3 6.4.120822 allows a remote attacker to execute code via shell metacharacters in the kuid parameter...

CVE-2019-20504

The Quest KACE K1000 Systems Management Appliance is vulnerable to remote code execution in versions prior to 6.4 SP3 (6.4.120822) . The vulnerability exists in the service/krashrpt.php file, where a remote attacker can execute arbitrary system commands by providing shell metacharacters in the ku...