CVE-2019-12918: SQL Injection
Published Nov 6, 2019
·Updated
Quest KACE Systems Management Appliance Server Center version 9.1.317 is vulnerable to SQL injection. The affected file is softwarelibrary.php and affected parameters are order[0][column] and order[0][dir].
Affected Software
1 affected component
Quest KACE Systems Management Appliance=9.1.317
Event History
Nov 6, 2019
CVE Published
via MITRE·02:45 PM
Data Sourced
via MITRE·02:45 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-12918?
The severity of CVE-2019-12918 is critical with a value of 9.8.
2
Which version of Quest KACE Systems Management Appliance Server Center is affected by CVE-2019-12918?
Quest KACE Systems Management Appliance Server Center version 9.1.317 is affected by CVE-2019-12918.
3
What file is affected by CVE-2019-12918?
The affected file is software_library.php.
4
Which parameters are affected by CVE-2019-12918?
The affected parameters are order[0][column] and order[0][dir].
5
How do I fix CVE-2019-12918?
To fix CVE-2019-12918, apply the necessary patches or updates provided by Quest KACE Systems Management Appliance.