3 matches found
VulnCheck KEV: CVE-2019-20504
service/krashrpt.php in Quest KACE K1000 Systems Management Appliance before 6.4 SP3 6.4.120822 allows a remote attacker to execute code via shell metacharacters in the kuid parameter...
9.8CVSS6AI score0.0955EPSS
SaveIn wildExploits1References2
CVE-2019-20504
service/krashrpt.php in Quest KACE K1000 Systems Management Appliance before 6.4 SP3 6.4.120822 allows a remote attacker to execute code via shell metacharacters in the kuid parameter...
9.8CVSS7.5AI score0.0955EPSS
SaveExploits1References1
CVE-2019-20504: Improper Neutralization of Special Elements used in an OS Command
service/krashrpt.php in Quest KACE K1000 Systems Management Appliance before 6.4 SP3 6.4.120822 allows a remote attacker to execute code via shell metacharacters in the kuid parameter...
9.8CVSS8.5AI score0.0955EPSS
SaveExploits1References2
20