ManageEngine SupportCenter Plus Detection

The remote web server hosts ManageEngine SupportCenter Plus, a web- based customer support application written in Java. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid55447; scriptversion"1.10";...

ManageEngine Support Center Plus 7.8 Build 7801 - Directory Traversal

ManageEngine Support Center Plus 7.8 Build 7801 - Directory Traversal Advisory: ManageEngine Support Center Plus 7.8 build 0x90.nl Software link: http://www.manageengine.com/products/support-center/download.html Tested on: Linux & Windows Category: Directory Traversal Severity: High Google Dork:...

Cross site scripting

Cross-site scripting XSS vulnerability in SolutionSearch.do in ManageEngine SupportCenter Plus 7.0.0 allows remote attackers to inject arbitrary web script or HTML via the searchText parameter, a related issue to CVE-2008-1299. NOTE: the provenance of this information is unknown; the details are...

CVE-2008-1432

CVE-2008-1432 is an XSS vulnerability in ManageEngine SupportCenter Plus 7.0.0 (SolutionSearch.do) where the searchText parameter can inject script/HTML. Related entry CVE-2008-1299 covers ManageEngine ServiceDesk Plus 7.0.0 Build 7011 with the same vector. Connected documents confirm affected pr...