PT-2015-6785

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine SupportCenter Plus version 7.90 Description The issue allows remote authenticated users to inject arbitrary web script or HTML. This can be achieved via the query parameter in the "run query editor query" module to...