Dell KACE K1000 File Upload

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Dell KACE K1000 File Upload', 'Description' = %q This module exploits a file upload vulnerability in Kace K1000 versions 5.0 to...

Dell KACE K1000 - Arbitrary File Upload (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Dell KACE K1000 File Upload', 'Description' = %q This module exploits a file upload vulnerability in Kace K1000 versions 5.0 to...

Patch Management: Missing updates from Dell KACE K1000

Binary data dellkacek1000getmissingupdates.nbin...

Patch Management: Dell KACE K1000 Computer Info Initialization

Binary data dellkacek1000getcomputerinfo.nbin...

Patch Management: Dell KACE K1000 Report

Binary data dellkacek1000report.nbin...

Patch Management: Dell KACE K1000 Settings

Binary data dellkacek1000initinfo.nbin...

Dell Kace 1000 SMA 5.4.70402 - Persistent XSS Vulnerabilities

No description provided by source...

Dell Kace 1000 SMA 5.4.742 - SQL Injection Vulnerabilities

No description provided by source. Title: ====== Dell Kace 1000 SMA 5.4.742 - SQL Injection Vulnerabilities Date: ===== 2013-07-22 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=832 VL-ID: ===== 832 Common Vulnerability Scoring System:...

Dell KACE K1000 < 5.5.90547 / 5.4.76849 Arbitrary File Upload and Command Execution

The web interface for the version of the Dell KACE K1000 appliance on the remote host is affected by an arbitrary file upload vulnerability. With a specially crafted HTTP request, an attacker could upload a malicious script to the web server directory and use it to execute arbitrary commands with...

Dell KACE K1000 File Upload

This module exploits a file upload vulnerability in Kace K1000 versions 5.0 to 5.3, 5.4 prior to 5.4.76849 and 5.5 prior to 5.5.90547 which allows unauthenticated users to execute arbitrary commands under the context of the 'www' user. This module also abuses the 'KSudoClient::RunCommandWait'...

Dell KACE K1000 Systems Management Appliance 'LABEL_ID'参数跨站脚本漏洞

BUGTRAQ ID: 65333 CVECAN ID: CVE-2014-0330 Dell KACE K1000是系统管理解决方案。 Dell KACE K1000系统管理设备5.5.90545版本及其他版本的adminui/userlist.php存在跨站脚本漏洞，远程攻击者可通过LABELID参数，利用此漏洞注入任意Web脚本或HTML。 0 Dell Kace 1000 Systems Management Appliance 5.5.90545 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Quest / Dell KACE K1000 Systems Management Appliance (SMA) <= 5.5.90545 XSS Vulnerability (SOL120154)

Quest / Dell KACE K1000 Systems Management Appliance SMA is prone to a cross-site scripting XSS vulnerability. Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier...

Dell KACE K1000 advisory_detail.php/ticket_list.php/ticket.php脚本SQL注入漏洞

CVECAN ID: CVE-2014-1671 Dell KACE K1000是系统管理解决方案。 Dell KACE K1000 5.4.76847及更早版本存在多个SQL注入漏洞，远程攻击者或经过身份验证的远程用户通过service/kbotservice.php的getUploadPath或getKBot SOAP请求内的macAddress元素、userui/advisorydetail.php或userui/ticket.php的ID参数、userui/ticketlist.php的ORDER参数，利用这些漏洞即可执行任意SQL命令。 0 Dell Kace 1000...

Dell KACE K2000 < 3.3.52857 Multiple Vulnerabilities

The remote Dell KACE K2000 appliance is affected by multiple vulnerabilities : - The appliance stores the recovery account password in plaintext within a PHP script. CVE-2011-4046 - The appliance can allow arbitrary command execution by leveraging database write access. CVE-2011-4047 - An...

Dell KACE K1000 Web Detection

Binary data dellkacek1000webdetect.nbin...

Dell KACE K1000 < 5.5 Multiple SQL Injection Vulnerabilities

The web interface for the version of the Dell KACE K1000 appliance on the remote host is affected by multiple SQL injection vulnerabilities. The following parameters and scripts are affected : - The 'TYPEID' parameter of 'adminui/historylog.php'. - The 'ID' parameter of 'adminui/service.php',...

CVE-2014-0330

Cross-site scripting XSS vulnerability in adminui/userlist.php on the Dell KACE K1000 management appliance 5.5.90545 allows remote attackers to inject arbitrary web script or HTML via the LABELID parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in adminui/userlist.php on the Dell KACE K1000 management appliance 5.5.90545 allows remote attackers to inject arbitrary web script or HTML via the LABELID parameter...

CVE-2014-0330

Cross-site scripting XSS vulnerability in adminui/userlist.php on the Dell KACE K1000 management appliance 5.5.90545 allows remote attackers to inject arbitrary web script or HTML via the LABELID parameter...

CVE-2014-0330

Dell KACE K1000 Systems Management Appliance (firmware 5.5.90545, and possibly earlier) contains a cross-site scripting (XSS) flaw in adminui/user_list.php where the LABEL_ID parameter can inject arbitrary script. Remote attackers can execute script in the victim’s browser context. CERT/Bug notes...