6477 matches found
Zoho ManageEngine Applications Manager SQL Injection (CVE-2019-11469)
A SQL injection vulnerability exists in Zoho ManageEngine Applications Manager. The vulnerability is due to improper validation of user-supplied input in FaultTemplateOptions.jsp. Successful exploitation could result in arbitrary SQL code execution...
CVE-2020-6843
Zoho ManageEngine ServiceDesk Plus 11.0 Build 11007 allows XSS. This issue was fixed in version 11.0 Build 11010, SD-83959...
CVE-2020-6843
Zoho ManageEngine ServiceDesk Plus 11.0 Build 11007 allows XSS. This issue was fixed in version 11.0 Build 11010, SD-83959...
Cross site scripting
Zoho ManageEngine ServiceDesk Plus 11.0 Build 11007 allows XSS. This issue was fixed in version 11.0 Build 11010, SD-83959...
CVE-2020-6843
Zoho ManageEngine ServiceDesk Plus 11.0 Build 11007 is affected by a cross-site scripting (XSS) vulnerability. The issue is noted as a reflected XSS due to improper handling/validation of user-supplied input in the web application, with exploitation leading to client-side code execution. The fixe...
CVE-2020-6843
Zoho ManageEngine ServiceDesk Plus 11.0 Build 11007 allows XSS. This issue was fixed in version 11.0 Build 11010, SD-83959...
PT-2020-19258
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ServiceDesk Plus versions prior to 11.0 Build 11010 Description The issue allows for cross-site scripting XSS, which is a type of security vulnerability that can be used to steal user data or take control of user sessions. Th...
CVE-2020-6843: Improper Neutralization of Input During Web Page Generation
Zoho ManageEngine ServiceDesk Plus 11.0 Build 11007 allows XSS. This issue was fixed in version 11.0 Build 11010, SD-83959...
ZOHO ManageEngine ServiceDeskPlus 11.0 Build 11007 Cross Site Scripting
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Reflected XSS product: ZOHO ManageEngine ServiceDeskPlus vulnerable version: = 11.0 Build 11007 fixed version: 11.0 Build 11010 CVE number: CVE-2020-6843 impact: medium...
ManageEngine Network Configuration Manager 12.2 - apiKey SQL Injection
ManageEngine Network Configuration Manager 12.2 - apiKey SQL Injection Exploit Title: ManageEngine Network Configuration Manager 12.2 - 'apiKey' SQL Injection discovery Date: 2019-01-24 published : 2020-01-20 Exploit Author: AmirHadi Yazdani Vendor Homepage:...
ManageEngine Network Configuration Manager 12.2 - (apiKey) SQL Injection Vulnerability
Exploit for java platform in category web applications Exploit Title: ManageEngine Network Configuration Manager 12.2 - 'apiKey' SQL Injection Exploit Author: AmirHadi Yazdani Vendor Homepage: https://www.manageengine.com/network-configuration-manager/ Software Link:...
ManageEngine Network Configuration Manager 12.2 SQL Injection
Exploit Title: ManageEngine Network Configuration Manager 12.2 - 'apiKey' SQL Injection discovery Date: 2019-01-24 published : 2020-01-20 Exploit Author: AmirHadi Yazdani Vendor Homepage: https://www.manageengine.com/network-configuration-manager/ Software Link:...
ManageEngine Network Configuration Manager 12.2 - 'apiKey' SQL Injection
Exploit Title: ManageEngine Network Configuration Manager 12.2 - 'apiKey' SQL Injection discovery Date: 2019-01-24 published : 2020-01-20 Exploit Author: AmirHadi Yazdani Vendor Homepage: https://www.manageengine.com/network-configuration-manager/ Software Link:...
CVE-2014-5007
Directory traversal vulnerability in the agentLogUploader servlet in ZOHO ManageEngine Desktop Central DC and Desktop Central Managed Service Providers MSP edition before 9 build 90055 allows remote attackers to write to and execute arbitrary files as SYSTEM via a .. dot dot in the filename...
Directory traversal
Directory traversal vulnerability in the agentLogUploader servlet in ZOHO ManageEngine Desktop Central DC and Desktop Central Managed Service Providers MSP edition before 9 build 90055 allows remote attackers to write to and execute arbitrary files as SYSTEM via a .. dot dot in the filename...
CVE-2014-5007
Directory traversal vulnerability in the agentLogUploader servlet in ZOHO ManageEngine Desktop Central DC and Desktop Central Managed Service Providers MSP edition before 9 build 90055 allows remote attackers to write to and execute arbitrary files as SYSTEM via a .. dot dot in the filename...
CVE-2014-5007
CVE-2014-5007 affects ManageEngine Desktop Central and Desktop Central MSP before 9 build 90055. A directory traversal in the agentLogUploader servlet allows remote attackers to write to and execute arbitrary files as SYSTEM via a .. in the filename parameter. This is a network-based impact with ...
PT-2020-7694
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Desktop Central versions prior to 9 build 90055 Zoho ManageEngine Desktop Central Managed Service Providers edition versions prior to 9 build 90055 Description A directory traversal issue exists in the agentLogUploader servle...
CVE-2014-5007: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in the agentLogUploader servlet in ZOHO ManageEngine Desktop Central DC and Desktop Central Managed Service Providers MSP edition before 9 build 90055 allows remote attackers to write to and execute arbitrary files as SYSTEM via a .. dot dot in the filename...