WS-2023-0258

Authorized clients in Tokenizer, having an injectprocessor secret, could brute-force the secret token value by abusing the fmt parameter to the Proxy-Tokenizer header...

CVE-2018-11133

The 'fmt' parameter of the '/common/runcrossreport.php' script in the the Quest KACE System Management Appliance 8.0.318 is vulnerable to cross-site scripting...

CVE-2018-11133: Improper Neutralization of Input During Web Page Generation

The 'fmt' parameter of the '/common/runcrossreport.php' script in the the Quest KACE System Management Appliance 8.0.318 is vulnerable to cross-site scripting...

PT-2018-10324

Name of the Vulnerable Software and Affected Versions Quest KACE System Management Appliance version 8.0.318 Description The issue concerns a cross-site scripting vulnerability in the '/common/run cross report.php' script. Specifically, the fmt parameter is vulnerable. Recommendations For Quest...