Search Results | AttackerKB

Show filters

Clear All

Disclosure Year Disclosure Month

Collection Command and Control Credential Access Defense Evasion Discovery Execution Exfiltration Impact Initial Access Lateral Movement Persistence Privilege Escalation

1 Total Results

Displaying 1-1 of 1

Attacker Value

Unknown

The Quest Kace K1000 Appliance is vulnerable to multiple Blind SQL Injections.

Disclosure Date: June 03, 2019 (last updated November 27, 2024)

The Quest Kace K1000 Appliance, versions prior to 9.0.270, allows an authenticated, remote attacker with least privileges ('User Console Only' role) to potentially exploit multiple Blind SQL Injection vulnerabilities to retrieve sensitive information from the database or copy the entire database. An authenticated remote attacker could leverage Blind SQL injections to obtain sensitive data.

1 Total Results

Displaying 1-1 of 1

Unknown

The Quest Kace K1000 Appliance is vulnerable to multiple Blind SQL Injections.

Quick Cookie Notification