ManageEngine Desktop Central 10.0.271 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: ManageEngine Desktop Central 10 - Cross-Site Scripting Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.manageengine.com/ Hardware Link : https://www.manageengine.com/products/desktop-central/ Software : ZOHO Corp...

CVE-2018-17243: Improper Neutralization of Special Elements used in an SQL Command

Global Search in Zoho ManageEngine OpManager before 12.3 123205 allows SQL Injection...

ManageEngine SupportCenter Plus 8.1.0 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: ManageEngine SupportCenter Plus 8.1.0 - HTML Injection and Stored XSS Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.manageengine.com/ Hardware Link : https://www.manageengine.com/products/support-center/ Software ...

PT-2018-13963

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine OpManager versions prior to 12.3 123205 Description The issue allows for SQL Injection in the Global Search feature. Recommendations For versions prior to 12.3 123205, update to version 12.3 123205 or later to resolve the iss...

ManageEngine Desktop Central 10.0.271 Cross Site Scripting

Exploit Title: ManageEngine Desktop Central 10 - Cross-Site Scripting Date: 2018-09-11 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.manageengine.com/ Hardware Link : https://www.manageengine.com/products/desktop-central/ Software : ZOHO Corp ManageEngine Desktop Central 10 Product...

ManageEngine SupportCenter Plus 8.1.0 Cross Site Scripting

Exploit Title: ManageEngine SupportCenter Plus 8.1.0 - HTML Injection and Stored XSS Date: 2018-09-12 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.manageengine.com/ Hardware Link : https://www.manageengine.com/products/support-center/ Software : ZOHO Corp ManageEngine SupportCente...

ManageEngine Multiple Products File Disclosure

File disclosure vulnerability in ManageEngine Firewall Analyzer, NetFlow Analyzer, Network Configuration Manager, OpManager and OpUtils Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

ZOHO ManageEngine Desktop Central Elevation of Privilege Vulnerability

ZOHO ManageEngine Desktop Central DC is a desktop management solution from ZOHO. The solution includes software distribution, patch management, system configuration, remote control and other functional modules to support the entire lifecycle of desktop and server management. An elevation of...

CVE-2018-13412

An issue was discovered in the Self Service Portal in Zoho ManageEngine Desktop Central before 10.0.282. A clickable company logo in a window running as SYSTEM can be abused to escalate privileges. In cloud, the issue is fixed in 10.0.470 agent version...

CVE-2018-13411

An issue was discovered in Zoho ManageEngine Desktop Central before 10.0.282. A clickable company logo in a window running as SYSTEM can be abused to escalate privileges. In cloud, the issue is fixed in 10.0.470 agent version...

CVE-2018-13412

An issue was discovered in the Self Service Portal in Zoho ManageEngine Desktop Central before 10.0.282. A clickable company logo in a window running as SYSTEM can be abused to escalate privileges. In cloud, the issue is fixed in 10.0.470 agent version...

Information disclosure

An issue was discovered in Zoho ManageEngine Desktop Central before 10.0.282. A clickable company logo in a window running as SYSTEM can be abused to escalate privileges. In cloud, the issue is fixed in 10.0.470 agent version...

Information disclosure

An issue was discovered in the Self Service Portal in Zoho ManageEngine Desktop Central before 10.0.282. A clickable company logo in a window running as SYSTEM can be abused to escalate privileges. In cloud, the issue is fixed in 10.0.470 agent version...

CVE-2018-13412

The CVE-2018-13412 issue affects Zoho ManageEngine Desktop Central’s Self Service Portal prior to 10.0.282. A clickable company logo in a window running with SYSTEM privileges can be abused to escalate privileges. Cloud deployments are fixed in 10.0.470 agent version. Other references corroborate...

CVE-2018-13412

An issue was discovered in the Self Service Portal in Zoho ManageEngine Desktop Central before 10.0.282. A clickable company logo in a window running as SYSTEM can be abused to escalate privileges. In cloud, the issue is fixed in 10.0.470 agent version...

CVE-2018-13411

An issue was discovered in Zoho ManageEngine Desktop Central before 10.0.282. A clickable company logo in a window running as SYSTEM can be abused to escalate privileges. In cloud, the issue is fixed in 10.0.470 agent version...

CVE-2018-13411

CVE-2018-13411 affects Zoho ManageEngine Desktop Central prior to 10.0.282. A clickable company logo in a window running as SYSTEM allows privilege escalation. In cloud, the issue is fixed in 10.0.470 agent version; on-prem mitigation is upgrade/build 100282 (as referenced by the Nessus plugin). ...

PT-2018-11807

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Desktop Central versions prior to 10.0.282 Zoho ManageEngine Desktop Central agent versions prior to 10.0.470 Description A security issue was found in Zoho ManageEngine Desktop Central, where a clickable company logo in a...

CVE-2018-13412: Incorrect Permission Assignment for Critical Resource

An issue was discovered in the Self Service Portal in Zoho ManageEngine Desktop Central before 10.0.282. A clickable company logo in a window running as SYSTEM can be abused to escalate privileges. In cloud, the issue is fixed in 10.0.470 agent version...

PT-2018-11808

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Desktop Central versions prior to 10.0.282 Zoho ManageEngine Desktop Central agent versions prior to 10.0.470 Description An issue in the Self Service Portal of Zoho ManageEngine Desktop Central allows a clickable company log...