| Package | Affected versions | Patched versions |
|---|---|---|
| zenworks patch management server | = 6.3.2.700 |
Multiple SQL injection vulnerabilities in dagent/downloadreport.asp in Novell ZENworks Patch Management (ZPM) before 6.3.2.700 allow remote attackers to execute arbitrary SQL commands via the (1) agentid and (2) pass parameters.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free