CVE-2019-13079: SQL Injection
Published Nov 6, 2019
·Updated
Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection. An authenticated user has the ability to execute arbitrary commands against the database. The affected component is /adminui/historylog.php. The affected parameter is TYPENAME.
Affected Software
1 affected component
Quest KACE Systems Management Appliance=9.1.317
Event History
Nov 6, 2019
CVE Published
via MITRE·02:53 PM
Data Sourced
via MITRE·02:53 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2019-13079.
2
What is the severity of CVE-2019-13079?
The severity of CVE-2019-13079 is high, with a severity value of 8.8.
3
Which software is affected by CVE-2019-13079?
Quest KACE Systems Management Appliance Server Center version 9.1.317 is affected by CVE-2019-13079.
4
What is the affected component of CVE-2019-13079?
The affected component of CVE-2019-13079 is /adminui/history_log.php.
5
How can an authenticated user exploit CVE-2019-13079?
An authenticated user can exploit CVE-2019-13079 by executing arbitrary commands against the database.