Munkireport Security Vulnerabilities and Issues — Munkireport CVE List

Lucene search

Munkireport ProjectMunkireport

3 matches found

CVE•added 2020/03/09 7:15 p.m.•57 views

CVE-2020-10190

An issue was discovered in MunkiReport before 5.3.0. An authenticated user could achieve SQL Injection in app/models/tablequery.php by crafting a special payload on the /datatables/data endpoint.

8.8CVSS8.9AI score0.00515EPSS

CVE•added 2020/07/23 2:15 p.m.•35 views

CVE-2020-15884

A SQL injection vulnerability in TableQuery.php in MunkiReport before 5.6.3 allows attackers to execute arbitrary SQL commands via the order[0][dir] field on POST requests to /datatables/data.

8.8CVSS9.1AI score0.00314EPSS

Web

CVE•added 2020/07/23 2:15 p.m.•25 views

CVE-2020-15882

A CSRF issue in manager/delete_machine/{id} in MunkiReport before 5.6.3 allows attackers to delete arbitrary machines from the MunkiReport database.

8.1CVSS8AI score0.00123EPSS

Web