Security Advisory

CVE-2020-15886

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-07-23 13:37:58

Last updated 2024-08-04 13:30:22

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

A SQL injection vulnerability in reportdata_controller.php in the reportdata module before 3.5 for MunkiReport allows attackers to execute arbitrary SQL commands via the req parameter of the /module/reportdata/ip endpoint.

← Browse all CVEs View on cve.org ↗