Quest KACE System Management Appliance PHP Object Injection Vulnerability

Quest KACE System Management Appliance is an IT asset management appliance from Quest Software, USA. A PHP object injection vulnerability exists in the '/adminui/errordetails.php' script in Quest KACE System Management Appliance version 8.0.318. An attacker can exploit this vulnerability to injec...

CVE-2018-11135: Improperly Controlled Modification of Object Prototype Attributes

The script '/adminui/errordetails.php' in the Quest KACE System Management Appliance 8.0.318 allows authenticated users to conduct PHP object injection attacks...