Skip to content
OpenAdvisories

Package · Packagist

munkireport/softwareupdate

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2020-15887

    MunkiReport Software Update module is vulnerable to SQL injection

    A SQL injection vulnerability in softwareupdate_controller.php in the Software Update module before 1.6 for MunkiReport allows attackers to execute arbitrary SQL commands via the last URL parameter of the /module/softwareupdate/get_tab_data/ endpoint.

    munkireport/softwareupdate Packagist