PT-2020-10484

Name of the Vulnerable Software and Affected Versions Quest KACE K1000 Systems Management Appliance versions prior to 6.4 SP3 6.4.120822 Description The issue allows a remote attacker to execute code via shell metacharacters in the kuid parameter in the service/krashrpt.php file. Recommendations...

CVE-2019-20504: Improper Neutralization of Special Elements used in an OS Command

service/krashrpt.php in Quest KACE K1000 Systems Management Appliance before 6.4 SP3 6.4.120822 allows a remote attacker to execute code via shell metacharacters in the kuid parameter...