CVE-2018-11187

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 45 of 46).

Metrics

CVSS 3.0 8.8/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published
Jun 2, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-111888.8Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 46 of 46).CVE-2018-111898.8Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 1 of 6).CVE-2018-111908.8Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 2 of 6).CVE-2018-111918.8Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 3 of 6).CVE-2018-111928.8Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 4 of 6).CVE-2018-111938.8Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 5 of 6).CVE-2018-111948.8Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 6 of 6).CVE-2018-111956.8Mahara 17.04 before 17.04.8 and 17.10 before 17.10.5 and 18.04 before 18.04.1 are vulnerable to the browser "back and refresh" attack. This CVE-2018-111967.5Mahara 17.04 before 17.04.8 and 17.10 before 17.10.5 and 18.04 before 18.04.1 can be used as medium to transmit viruses by placing infected CVE-2018-111986.1An issue was discovered in Mautic 2.13.1. There is Stored XSS via the authorUrl field in config.json.CVE-2018-11205.3A flaw was found affecting the Linux kernel before version 4.17. By mmap()ing a FUSE-backed file onto a process's memory containing command CVE-2018-112006.1An issue was discovered in Mautic 2.13.1. It has Stored XSS via the company name field.