Dell KACE K1000 < 5.5 Multiple SQL Injection Vulnerabilities

The web interface for the version of the Dell KACE K1000 appliance on the remote host is affected by multiple SQL injection vulnerabilities. The following parameters and scripts are affected : - The 'TYPEID' parameter of 'adminui/historylog.php'. - The 'ID' parameter of 'adminui/service.php',...

CVE-2014-0330

Cross-site scripting XSS vulnerability in adminui/userlist.php on the Dell KACE K1000 management appliance 5.5.90545 allows remote attackers to inject arbitrary web script or HTML via the LABELID parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in adminui/userlist.php on the Dell KACE K1000 management appliance 5.5.90545 allows remote attackers to inject arbitrary web script or HTML via the LABELID parameter...

CVE-2014-0330

Cross-site scripting XSS vulnerability in adminui/userlist.php on the Dell KACE K1000 management appliance 5.5.90545 allows remote attackers to inject arbitrary web script or HTML via the LABELID parameter...

CVE-2014-0330

Dell KACE K1000 Systems Management Appliance (firmware 5.5.90545, and possibly earlier) contains a cross-site scripting (XSS) flaw in adminui/user_list.php where the LABEL_ID parameter can inject arbitrary script. Remote attackers can execute script in the victim’s browser context. CERT/Bug notes...

CVE-2014-0330: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in adminui/userlist.php on the Dell KACE K1000 management appliance 5.5.90545 allows remote attackers to inject arbitrary web script or HTML via the LABELID parameter...

PT-2014-3563

Name of the Vulnerable Software and Affected Versions Dell KACE K1000 management appliance version 5.5.90545 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the LABEL ID parameter in the adminui/user list.php file. This cou...

Dell KACE K1000 management appliance contains a cross-site scripting vulnerability

Overview Dell KACE K1000 management appliance version 5.5.90545, and possibly earlier versions, contains a cross-site scripting XSS vulnerability. CWE-79 Description Dell KACE K1000 management appliance version 5.5.90545, and possibly earlier versions, contains a cross-site scripting XSS...

Quest / Dell KACE K1000 Systems Management Appliance (SMA) <= 5.4.76847 Multiple SQLi Vulnerabilities

Quest / Dell KACE K1000 Systems Management Appliance SMA is prone to multiple SQL injection SQLi vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2014-1671

Multiple SQL injection vulnerabilities in Dell KACE K1000 5.4.76847 and possibly earlier allow remote attackers or remote authenticated users to execute arbitrary SQL commands via the macAddress element in a 1 getUploadPath or 2 getKBot SOAP request to service/kbotservice.php; the ID parameter to...

Sql injection

Multiple SQL injection vulnerabilities in Dell KACE K1000 5.4.76847 and possibly earlier allow remote attackers or remote authenticated users to execute arbitrary SQL commands via the macAddress element in a 1 getUploadPath or 2 getKBot SOAP request to service/kbotservice.php; the ID parameter to...

CVE-2014-1671

CVE-2014-1671 affects Dell KACE K1000 systems (5.4.76847 and earlier) with multiple SQL injection vulnerabilities. The issues allow remote or authenticated users to inject arbitrary SQL via: (1) macAddress in service/kbot_service.php (getUploadPath/getKBot); (2) IDs in userui/advisory_detail.php ...

CVE-2014-1671

Multiple SQL injection vulnerabilities in Dell KACE K1000 5.4.76847 and possibly earlier allow remote attackers or remote authenticated users to execute arbitrary SQL commands via the macAddress element in a 1 getUploadPath or 2 getKBot SOAP request to service/kbotservice.php; the ID parameter to...

PT-2014-4286

Name of the Vulnerable Software and Affected Versions Dell KACE K1000 version 5.4.76847 and possibly earlier Description The issue allows remote attackers or remote authenticated users to execute arbitrary SQL commands. This can be achieved via several means, including the macAddress element in a...

CVE-2014-1671: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Dell KACE K1000 5.4.76847 and possibly earlier allow remote attackers or remote authenticated users to execute arbitrary SQL commands via the macAddress element in a 1 getUploadPath or 2 getKBot SOAP request to service/kbotservice.php; the ID parameter to...

Dell Kace 1000 Systems Management Appliance多个SQL注入漏洞

BUGTRAQ ID: 65029 Dell Kace 1000 Systems Management Appliance是系统管理设备。 Dell Kace 1000 Systems Management Appliance 5.4.76847及其他版本没有正确过滤getUploadPath及getKBot SOAP方法的"macAddress"参数值，可导致注入任意SQL代码，从而操作SQL查询。 0 Dell Kace 1000 Systems Management Appliance 5.4.76847 厂商补丁： Dell ----...

Dell Kace 1000 Systems Management Appliance DS-2014-001 - Multiple SQL Injections

Dell Kace 1000 Systems Management Appliance DS-2014-001 - Multiple SQL Injections source: https://www.securityfocus.com/bid/65029/info Dell Kace 1000 Systems Management Appliance is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input befor...

Dell Kace 1000 Systems Management Appliance DS-2014-001 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/65029/info Dell Kace 1000 Systems Management Appliance is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. Exploiting these issues could allow an attacker to...

Dell KACE K1000 Systems Management Appliance (SMA) Detection

Detection of Dell KACE K1000 Systems Management Appliance. The script sends a connection request to the server and attempts to extract the version number from the reply. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be...

Quest / Dell KACE K1000 Systems Management Appliance (SMA) <= 5.4.70402 Multiple SQLi Vulnerabilities

Quest / Dell KACE K1000 Systems Management Appliance SMA is prone to multiple SQL injection SQLi vulnerabilities. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...