PT-2019-13111

Name of the Vulnerable Software and Affected Versions Quest KACE Systems Management Appliance Server Center version 9.1.317 Description The issue allows an authenticated user to execute arbitrary commands against the database due to SQL injection. The affected component is "/userui/ticket...

PT-2019-13020

Name of the Vulnerable Software and Affected Versions Quest KACE Systems Management Appliance Server Center version 9.1.317 Description The issue concerns a SQL injection problem. The affected file is software library.php, and the vulnerable parameters are order0column and order0dir...

CVE-2019-12918: Improper Neutralization of Special Elements used in an SQL Command

Quest KACE Systems Management Appliance Server Center version 9.1.317 is vulnerable to SQL injection. The affected file is softwarelibrary.php and affected parameters are order0column and order0dir...

CVE-2019-13076: Improper Neutralization of Special Elements used in an SQL Command

Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection. An authenticated user has the ability to execute arbitrary commands against the database. The affected component is /userui/ticketlist.php, and affected parameters are order0column and order0dir...