Munkireport Software Update SQL Injection Vulnerability

Munkireport is a reporting tool for the Munki software management program.Software Update is one of the software update modules. An SQL injection vulnerability exists in the softwareupdatecontroller.php file in MunkiReport for Software Update versions prior to 1.6. The vulnerability can be...

PT-2020-14688

Name of the Vulnerable Software and Affected Versions MunkiReport Software Update module versions prior to 1.6 Description A SQL injection issue in the softwareupdate controller.php file allows attackers to execute arbitrary SQL commands via the last URL parameter of the "/module/softwareupdate/g...