high8.8
CVE-2018-11170
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 28 of 46).
Impact
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 28 of 46).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Quest | Disk Backup | before 4.0.3.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html
- http://seclists.org/fulldisclosure/2018/May/71
- https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
- http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html
- http://seclists.org/fulldisclosure/2018/May/71
- https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities