Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Dell/Quest KACE K1000 Unauthenticated File Upload RCE
Vulnerability Description
An unrestricted file upload vulnerability exists in Dell (acquired by Quest) KACE K1000 System Management Appliance version 5.0 - 5.3, 5.4 prior to 5.4.76849, and 5.5 prior to 5.5.90547 in the download_agent.php endpoint. An attacker can upload arbitrary PHP files to a temporary web-accessible directory, which are later executed through inclusion in backend code that loads files under attacker-controlled paths.
CVSS Information
N/A
Vulnerability Type
危险类型文件的不加限制上传
Vulnerability Title
Dell KACE K1000 System Management Appliance 安全漏洞
Vulnerability Description
Dell KACE K1000 System Management Appliance是美国戴尔（Dell）公司的一款用于IT系统和资产管理的工具。 Dell KACE K1000 System Management Appliance 5.0至5.3版本、5.4 5.4.76849之前版本和5.5 5.5.90547之前版本存在安全漏洞，该漏洞源于未验证上传文件类型，可能导致任意文件上传和远程代码执行。
CVSS Information
N/A
Vulnerability Type
N/A