59 matches found
CVE-2022-36412
In Zoho ManageEngine SupportCenter Plus before 11023, V3 API requests are vulnerable to authentication bypass. An API request may, in effect, be executed with the credentials of a user who authenticated in the past...
ZOHO ManageEngine SupportCenter Plus 授权问题漏洞
ZOHO ManageEngine SupportCenter Plus is a web-based customer support software from ZOHO India. It is used to allow organizations to efficiently manage customer requests, their account and contact information, service contracts, and provide a superior customer experience in the process. A security...
CVE-2022-36412: Improper Authentication
In Zoho ManageEngine SupportCenter Plus before 11023, V3 API requests are vulnerable to authentication bypass. An API request may, in effect, be executed with the credentials of a user who authenticated in the past...
CVE-2022-25373
Zoho ManageEngine SupportCenter Plus before 11020 allows Stored XSS in the request history...
CVE-2022-25373: Improper Neutralization of Input During Web Page Generation
Zoho ManageEngine SupportCenter Plus before 11020 allows Stored XSS in the request history...
CVE-2021-43296
Zoho ManageEngine SupportCenter Plus before 11016 is vulnerable to an SSRF attack in ActionExecutor...
CVE-2021-43294
Zoho ManageEngine SupportCenter Plus before 11016 is vulnerable to Reflected XSS in the Products module...
CVE-2021-43294
Zoho ManageEngine SupportCenter Plus before 11016 is vulnerable to Reflected XSS in the Products module...
CVE-2021-43294
Zoho ManageEngine SupportCenter Plus before 11016 is vulnerable to Reflected XSS in the Products module...
PT-2021-23808
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine SupportCenter Plus versions prior to 11016 Description The issue is related to a Server-Side Request Forgery SSRF attack in the ActionExecutor. This type of attack allows an attacker to trick the server into making requests t...
CVE-2021-43296: Server-Side Request Forgery (SSRF)
Zoho ManageEngine SupportCenter Plus before 11016 is vulnerable to an SSRF attack in ActionExecutor...
CVE-2021-43295: Improper Neutralization of Input During Web Page Generation
Zoho ManageEngine SupportCenter Plus before 11016 is vulnerable to Reflected XSS in the Accounts module...
CVE-2021-43294: Improper Neutralization of Input During Web Page Generation
Zoho ManageEngine SupportCenter Plus before 11016 is vulnerable to Reflected XSS in the Products module...
PT-2021-23806
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine SupportCenter Plus versions prior to 11016 Description The issue is related to Reflected XSS in the Products module. Recommendations For versions prior to 11016, update to version 11016 or later to resolve the issue...
PT-2021-23807
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine SupportCenter Plus versions prior to 11016 Description The issue is related to Reflected XSS in the Accounts module. Recommendations For versions prior to 11016, update to version 11016 or later to resolve the issue...
ZOHO ManageEngine SupportCenter Plus Cross-Site Scripting Vulnerability (CNVD-2018-19734)
ZOHO ManageEngine SupportCenter Plus is a suite of customer service support management software from ZOHO USA. The software provides help desk, customer management, service level management and tracking of customer requests. A cross-site scripting vulnerability exists in ZOHO ManageEngine...
CVE-2018-16965
In Zoho ManageEngine SupportCenter Plus before 8.1 Build 8109, there is HTML Injection and Stored XSS via the /ServiceContractDef.do contractName parameter...
PT-2018-13800
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine SupportCenter Plus versions prior to 8.1 Build 8109 Description The issue concerns HTML Injection and Stored XSS. It can be exploited via the /ServiceContractDef.do contractName parameter. Recommendations For versions prior t...
CVE-2018-16965: Improper Neutralization of Input During Web Page Generation
In Zoho ManageEngine SupportCenter Plus before 8.1 Build 8109, there is HTML Injection and Stored XSS via the /ServiceContractDef.do contractName parameter...
ManageEngine SupportCenter Plus 8.1.0 Cross Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: ManageEngine SupportCenter Plus 8.1.0 - HTML Injection and Stored XSS Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.manageengine.com/ Hardware Link : https://www.manageengine.com/products/support-center/ Software ...