ManageEngine Applications Manager Unsupported Version Detection

According to its self-reported version, the ManageEngine Applications Manager installed on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities...

ManageEngine Applications Manager CustomerManagementAPI custId SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of ManageEngine Applications Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the CustomerManagementAPI class. The issue lies in the failure to...

ManageEngine Applications Manager IT360UtilitiesServlet query SQL Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of ManageEngine Applications Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the IT360UtilitiesServlet servlet. The issue lies in the ability to...

ManageEngine Applications Manager DowntimeSchedulerServlet TASKID SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of ManageEngine Applications Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DowntimeSchedulerServlet servlet. The issue lies in the failure ...

ManageEngine Applications Manager It360SPUtil resIds SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of ManageEngine Applications Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the It360SPUtil class. The issue lies in the failure to sanitize...

ManageEngine Applications Manager CommonAPIUtil getMGDetails Remote Code Execution Vulnerability

ZOHO ManageEngine Applications Manager is a set of application performance monitoring software from ZOHO. The software allows remote monitoring and management of different business systems, applications and network services e.g. servers, operating systems, etc.. A remote code execution...

ManageEngine Applications Manager CommonAPIUtil enableDisableAlarmsAction resourceid SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of ManageEngine Applications Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the enableDisableAlarmsAction method of the CommonAPIUtil class. The...

ManageEngine Applications Manager CommonAPIUtil getAdminMG Remote Code Execution Vulnerability

ZOHO ManageEngine Applications Manager is a set of application performance monitoring software from ZOHO. The software allows remote monitoring and management of different business systems, applications and network services e.g. servers, operating systems, etc.. A remote code execution...

ManageEngine Applications Manager CommonAPIUtil getMGDetails groupId SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of ManageEngine Applications Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the getMGDetails method of the CommonAPIUtil class. The issue lies i...

ManageEngine Applications Manager Default Administrator Credentials

The ManageEngine Applications Manager running on the remote host uses a default set of credentials 'admin' / 'admin' to control access to its management interface. An attacker can exploit this to gain administrative access to the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

ManageEngine Applications Manager Detection

The remote web server hosts ManageEngine Applications Manager, a web-based server and application performance monitoring software product written in Java. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid63157; scriptversion"1.5";...

ManageEngine Applications Manager - Multiple Cross-Site Scripting SQL Injections

ManageEngine Applications Manager - Multiple Cross-Site Scripting SQL Injections source: https://www.securityfocus.com/bid/54759/info ManageEngine Applications Manager is prone to multiple SQL-injection and multiple cross-site scripting vulnerabilities. Exploiting these vulnerabilities could allo...

ManageEngine Applications Manager - Multiple SQL Injections

ManageEngine Applications Manager - Multiple SQL Injections source: https://www.securityfocus.com/bid/54756/info ManageEngine Applications Manager is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL...

ManageEngine Applications Manager - Multiple SQL Injections

source: https://www.securityfocus.com/bid/54756/info ManageEngine Applications Manager is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

ManageEngine Applications Manager - Multiple Cross-Site Scripting / SQL Injections

source: https://www.securityfocus.com/bid/54759/info ManageEngine Applications Manager is prone to multiple SQL-injection and multiple cross-site scripting vulnerabilities. Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the...

ME Application Manager 10 Cross Site Scripting / SQL Injection

Exploit for php platform in category web applications ME Application Manager 10 - Multiple Web Vulnerabilities Introduction: ============= ManageEngine Applications Manager is a server and application performance monitoring software that helps businesses ensure high availability and performance f...

ManageEngine Applications Manager 9.x, 10.x Multiple Vulnerabilities - Active Check

ManageEngine Applications Manager is prone to multiple cross-site scripting XSS and SQL injection SQLi vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2012-1063

Multiple SQL injection vulnerabilities in ManageEngine Applications Manager 9.x and 10.x allow remote attackers to execute arbitrary SQL commands via the 1 viewId parameter to fault/AlarmView.do or 2 period parameter to showHistoryData.do...

CVE-2012-1063: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in ManageEngine Applications Manager 9.x and 10.x allow remote attackers to execute arbitrary SQL commands via the 1 viewId parameter to fault/AlarmView.do or 2 period parameter to showHistoryData.do...

PT-2012-3051

Multiple cross-site scripting XSS vulnerabilities in ManageEngine Applications Manager 9.x and 10.x allow remote attackers to inject arbitrary web script or HTML via the 1 period parameter to showHistoryData.do; 2 selectedNetwork, 3 network, or 4 group parameters to showresource.do; 5 header...