CVE-2020-15887

CVE-2020-15887 affects MunkiReport’s Software Update module (versions before 1.6). The vulnerability is a SQL injection in softwareupdate_controller.php, exploitable via the last URL parameter of the /module/softwareupdate/get_tab_data/ endpoint, allowing arbitrary SQL commands. The provided docu...