CVE-2020-15887

A SQL injection vulnerability in softwareupdatecontroller.php in the Software Update module before 1.6 for MunkiReport allows attackers to execute arbitrary SQL commands via the last URL parameter of the /module/softwareupdate/gettabdata/ endpoint...

CVE-2020-15887

CVE-2020-15887 affects MunkiReport’s Software Update module (versions before 1.6). The vulnerability is a SQL injection in softwareupdate_controller.php, exploitable via the last URL parameter of the /module/softwareupdate/get_tab_data/ endpoint, allowing arbitrary SQL commands. The provided docu...