dell kace k1000 systems management appliance - vulnerabilities and exploits

(subscribe to this query)

Multiple SQL injection vulnerabilities in Dell KACE K1000 5.4.76847 and possibly earlier allow remote attackers or remote authenticated users to execute arbitrary SQL commands via the macAddress element in a (1) getUploadPath or (2) getKBot SOAP request to service/kbot_service.ph...

Dell Kace K1200s Systems Management Appliance -Dell Kace K1100s Systems Management Appliance -Dell Kace K1000 Systems Management Appliance Software 5.4.76847 Dell Kace K1000 Systems Management Appliance -Dell Kace K1000 Systems Management Virtual Appliance -

1 EDB exploit

Cross-site scripting (XSS) vulnerability in adminui/user_list.php on the Dell KACE K1000 management appliance 5.5.90545 allows remote malicious users to inject arbitrary web script or HTML via the LABEL_ID parameter.

Dell Kace K1000 Systems Management Appliance Software 5.5.90545 Dell Kace K1000 Systems Management Appliance -

The Quest Kace K1000 Appliance, versions before 9.0.270, allows an authenticated, remote attacker with least privileges ('User Console Only' role) to potentially exploit multiple Blind SQL Injection vulnerabilities to retrieve sensitive information from the database or ...

Quest Kace Systems Management Appliance Firmware

1 EDB exploit

The Quest Kace K1000 Appliance, versions before 9.0.270, allows an authenticated least privileged user with 'User Console Only' rights to potentially inject arbitrary JavaScript code on the tickets page. Script execution could allow a malicious user of the system to ste...

Quest Kace Systems Management Appliance Firmware

1 EDB exploit

The Quest Kace K1000 Appliance, versions before 9.0.270, allows a remote malicious user to exploit the misconfigured Cross-Origin Resource Sharing (CORS) mechanism. An unauthenticated, remote attacker could exploit this vulnerability to perform sensitive actions such as adding a ...

Quest Kace Systems Management Appliance Firmware

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook