CVE-2006-6450

Concrete details found: PatchLink Update Server (basis for Novell ZENworks Patch Management) is affected by CVE-2006-6450. The vulnerability lies in dagent/downloadreport.asp where unsanitized input for the parameters agentid and pass is used to construct SQL queries. This allows an unauthenticat...