Patch Management: Dell KACE K1000 Computer Info Initialization

Binary data dellkacek1000getcomputerinfo.nbin...

Patch Management: Dell KACE K1000 Report

Binary data dellkacek1000report.nbin...

Patch Management: Missing updates from Dell KACE K1000

Binary data dellkacek1000getmissingupdates.nbin...

Dell Kace 1000 SMA 5.4.70402 - Persistent XSS Vulnerabilities

No description provided by source...

Dell Kace 1000 SMA 5.4.742 - SQL Injection Vulnerabilities

No description provided by source. Title: ====== Dell Kace 1000 SMA 5.4.742 - SQL Injection Vulnerabilities Date: ===== 2013-07-22 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=832 VL-ID: ===== 832 Common Vulnerability Scoring System:...

Dell KACE K1000 < 5.5.90547 / 5.4.76849 Arbitrary File Upload and Command Execution

The web interface for the version of the Dell KACE K1000 appliance on the remote host is affected by an arbitrary file upload vulnerability. With a specially crafted HTTP request, an attacker could upload a malicious script to the web server directory and use it to execute arbitrary commands with...

Dell KACE K1000 Systems Management Appliance 'LABEL_ID'参数跨站脚本漏洞

BUGTRAQ ID: 65333 CVECAN ID: CVE-2014-0330 Dell KACE K1000是系统管理解决方案。 Dell KACE K1000系统管理设备5.5.90545版本及其他版本的adminui/userlist.php存在跨站脚本漏洞，远程攻击者可通过LABELID参数，利用此漏洞注入任意Web脚本或HTML。 0 Dell Kace 1000 Systems Management Appliance 5.5.90545 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Quest / Dell KACE K1000 Systems Management Appliance (SMA) <= 5.5.90545 XSS Vulnerability (SOL120154)

Quest / Dell KACE K1000 Systems Management Appliance SMA is prone to a cross-site scripting XSS vulnerability. Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier...

Dell KACE K1000 advisory_detail.php/ticket_list.php/ticket.php脚本SQL注入漏洞

CVECAN ID: CVE-2014-1671 Dell KACE K1000是系统管理解决方案。 Dell KACE K1000 5.4.76847及更早版本存在多个SQL注入漏洞，远程攻击者或经过身份验证的远程用户通过service/kbotservice.php的getUploadPath或getKBot SOAP请求内的macAddress元素、userui/advisorydetail.php或userui/ticket.php的ID参数、userui/ticketlist.php的ORDER参数，利用这些漏洞即可执行任意SQL命令。 0 Dell Kace 1000...

Dell KACE K2000 < 3.3.52857 Multiple Vulnerabilities

The remote Dell KACE K2000 appliance is affected by multiple vulnerabilities : - The appliance stores the recovery account password in plaintext within a PHP script. CVE-2011-4046 - The appliance can allow arbitrary command execution by leveraging database write access. CVE-2011-4047 - An...

Dell KACE K1000 Web Detection

Binary data dellkacek1000webdetect.nbin...

Dell KACE K1000 < 5.5 Multiple SQL Injection Vulnerabilities

The web interface for the version of the Dell KACE K1000 appliance on the remote host is affected by multiple SQL injection vulnerabilities. The following parameters and scripts are affected : - The 'TYPEID' parameter of 'adminui/historylog.php'. - The 'ID' parameter of 'adminui/service.php',...

CVE-2014-0330

Cross-site scripting XSS vulnerability in adminui/userlist.php on the Dell KACE K1000 management appliance 5.5.90545 allows remote attackers to inject arbitrary web script or HTML via the LABELID parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in adminui/userlist.php on the Dell KACE K1000 management appliance 5.5.90545 allows remote attackers to inject arbitrary web script or HTML via the LABELID parameter...

CVE-2014-0330

Dell KACE K1000 Systems Management Appliance (firmware 5.5.90545, and possibly earlier) contains a cross-site scripting (XSS) flaw in adminui/user_list.php where the LABEL_ID parameter can inject arbitrary script. Remote attackers can execute script in the victim’s browser context. CERT/Bug notes...

CVE-2014-0330

Cross-site scripting XSS vulnerability in adminui/userlist.php on the Dell KACE K1000 management appliance 5.5.90545 allows remote attackers to inject arbitrary web script or HTML via the LABELID parameter...

Dell KACE K1000 management appliance contains a cross-site scripting vulnerability

Overview Dell KACE K1000 management appliance version 5.5.90545, and possibly earlier versions, contains a cross-site scripting XSS vulnerability. CWE-79 Description Dell KACE K1000 management appliance version 5.5.90545, and possibly earlier versions, contains a cross-site scripting XSS...

Quest / Dell KACE K1000 Systems Management Appliance (SMA) <= 5.4.76847 Multiple SQLi Vulnerabilities

Quest / Dell KACE K1000 Systems Management Appliance SMA is prone to multiple SQL injection SQLi vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2014-1671

Multiple SQL injection vulnerabilities in Dell KACE K1000 5.4.76847 and possibly earlier allow remote attackers or remote authenticated users to execute arbitrary SQL commands via the macAddress element in a 1 getUploadPath or 2 getKBot SOAP request to service/kbotservice.php; the ID parameter to...

Sql injection

Multiple SQL injection vulnerabilities in Dell KACE K1000 5.4.76847 and possibly earlier allow remote attackers or remote authenticated users to execute arbitrary SQL commands via the macAddress element in a 1 getUploadPath or 2 getKBot SOAP request to service/kbotservice.php; the ID parameter to...