A SQL injection vulnerability in softwareupdate_controller.php in the Software Update module before 1.6 for MunkiReport allows attackers to execute arbitrary SQL commands via the last URL parameter of the /module/softwareupdate/get_tab_data/ endpoint.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| munkireport/softwareupdate(Packagist) | 0 | 1.6 | N/A |
CVSS Metrics
