CoreCVE
Back

HIGH

Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection

Published Nov 6, 2019

Description

Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection. An authenticated user has the ability to execute arbitrary commands against the database. The affected component is /common/user_profile.php. The affected parameter is sort_column.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (3)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Nov 6, 2019
Updated Aug 4, 2024
Reserved Jun 30, 2019
Link CVE-2019-13078
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2019-13078
Red Hat
Severity n/a
Public date n/a
Links CVE-2019-13078
ENISA EUVD
Assigner mitre
Published Nov 6, 2019
Updated Aug 4, 2024
Exploited since n/a
Link EUVD-2019-4629
EUVD-2019-4629