| Package | Affected versions | Patched versions |
|---|---|---|
| kace system management appliance | = 8.0.318 |
The 'checksum' parameter of the '/common/download_attachment.php' script in the Quest KACE System Management Appliance 8.0.318 can be abused to read arbitrary files with 'www' privileges via Directory Traversal. No administrator privileges are needed to execute this script.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free