CVE-2019-13078: SQL Injection
Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection. An authenticated user has the ability to execute arbitrary commands against the database. The affected component is /common/userprofile.php. The affected parameter is sortcolumn.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-13078?
CVE-2019-13078 is a vulnerability in Quest KACE Systems Management Appliance Server Center 9.1.317 that allows SQL injection.
What is the severity of CVE-2019-13078?
The severity of CVE-2019-13078 is rated as high with a CVSS score of 8.8.
How does CVE-2019-13078 affect Quest KACE Systems Management Appliance?
CVE-2019-13078 allows an authenticated user to execute arbitrary commands against the database in Quest KACE Systems Management Appliance Server Center 9.1.317.
What is the affected component of CVE-2019-13078?
The affected component of CVE-2019-13078 is /common/user_profile.php.
How can I fix the SQL injection vulnerability in Quest KACE Systems Management Appliance Server Center 9.1.317?
To fix the SQL injection vulnerability in Quest KACE Systems Management Appliance Server Center 9.1.317, it is recommended to apply the latest security updates provided by Quest.