Description
The 'fmt' parameter of the '/common/run_cross_report.php' script in the the Quest KACE System Management Appliance 8.0.318 is vulnerable to cross-site scripting.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Quest KACE SMA /common/run_cross_report.php 'fmt' XSS http/cves/2018/CVE-2018-11133.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.