CVE-2014-125113P2CRITICALCVSS 9.3PoC≥ 5.0, ≤ 5.3·≥ 5.4, < 5.4.76849+1 more2025-08-05
CVE-2014-125113 [CRITICAL] CWE-306 CVE-2014-125113: An unrestricted file upload vulnerability exists in Dell (acquired by Quest) KACE K1000 System Manag
An unrestricted file upload vulnerability exists in Dell (acquired by Quest) KACE K1000 System Management Appliance version 5.0 - 5.3, 5.4 prior to 5.4.76849, and 5.5 prior to 5.5.90547 in the download_agent.php endpoint. An attacker can upload arbitrary PHP files to a temporary web-accessible directory, which are later executed through inclusio
nvd