6494 matches found
ManageEngine ADManager Plus 6.5.7 - HTML Injection
Exploit Title: ManageEngine ADManager Plus 6.5.7 - HTML Injection Date: 2018-08-21 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.manageengine.com/ Hardware Link : https://www.manageengine.com/products/ad-manager/ Software : ZOHO Corp ManageEngine ADManager Plus Product Version: 6.5...
CVE-2018-15169
A reflected Cross-site scripting XSS vulnerability in Zoho ManageEngine Applications Manager 13 before build 13820 allows remote attackers to inject arbitrary web script or HTML via the /deleteMO.do method parameter...
CVE-2018-15168
A SQL Injection vulnerability exists in the Zoho ManageEngine Applications Manager 13 before build 13820 via the resids parameter in a /editDisplaynames.do?method=editDisplaynames GET request...
CVE-2018-15169
A reflected Cross-site scripting XSS vulnerability in Zoho ManageEngine Applications Manager 13 before build 13820 allows remote attackers to inject arbitrary web script or HTML via the /deleteMO.do method parameter...
Sql injection
A SQL Injection vulnerability exists in the Zoho ManageEngine Applications Manager 13 before build 13820 via the resids parameter in a /editDisplaynames.do?method=editDisplaynames GET request...
Cross site scripting
A reflected Cross-site scripting XSS vulnerability in Zoho ManageEngine Applications Manager 13 before build 13820 allows remote attackers to inject arbitrary web script or HTML via the /deleteMO.do method parameter...
CVE-2018-15168: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability exists in the Zoho ManageEngine Applications Manager 13 before build 13820 via the resids parameter in a /editDisplaynames.do?method=editDisplaynames GET request...
CVE-2018-15169: Improper Neutralization of Input During Web Page Generation
A reflected Cross-site scripting XSS vulnerability in Zoho ManageEngine Applications Manager 13 before build 13820 allows remote attackers to inject arbitrary web script or HTML via the /deleteMO.do method parameter...
CVE-2018-15168
A SQL Injection vulnerability exists in the Zoho ManageEngine Applications Manager 13 before build 13820 via the resids parameter in a /editDisplaynames.do?method=editDisplaynames GET request...
Zoho ManageEngine Applications Manager Cross-Site Scripting Vulnerability (CNVD-2019-30263)
ZOHO ManageEngine Applications Manager is a set of IT operation and maintenance management solutions of the United States ZhuoHao ZOHO company. The product has application performance management, fault management, report generation and SLA management and other functions. A cross-site scripting...
Zoho ManageEngine Applications Manager SQL Injection Vulnerability (CNVD-2018-15179)
ZOHO ManageEngine Applications Manager is a set of IT operation and maintenance management solutions of the United States ZhuoHao ZOHO company. The product has application performance management, fault management, report generation and SLA management and other functions. A SQL injection...
PT-2018-12918
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Applications Manager versions prior to 13 build 13820 Description A reflected Cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the "deleteMO.do" method parameter. Recommendatio...
CVE-2018-15168
CVE-2018-15168 involves a SQL injection in Zoho ManageEngine Applications Manager 13 prior to build 13820, exploitable via the resids parameter in a GET request to /editDisplaynames.do?method=editDisplaynames. The issue is documented in multiple sources (NVD entry and CVE lists) with the affected...
PT-2018-12917
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Applications Manager version 13 before build 13820 Description A SQL Injection issue exists via the resids parameter in a "/editDisplaynames.do?method=editDisplaynames" GET request. Recommendations For Zoho ManageEngine...
CVE-2018-15169
A reflected Cross-site scripting XSS vulnerability in Zoho ManageEngine Applications Manager 13 before build 13820 allows remote attackers to inject arbitrary web script or HTML via the /deleteMO.do method parameter...
CVE-2018-15169
The CVE-2018-15169 entry concerns Zoho ManageEngine Applications Manager 13 before build 13820, where a reflected XSS vulnerability exists in the /deleteMO.do parameter. The issue allows remote attackers to inject arbitrary web script or HTML. Documented impacts include the ability to perform scr...
Zoho ManageEngine 13 (13790 build) XSS / File Read / File Deletion Vulnerabilities
Exploit for php platform in category web applications This issue has been reported to the vendor who has already published patches for this issue. https://www.manageengine.com/products/applicationsmanager/issues.html ========================== Advisory: Zoho manageengine Applications Manager...
Zoho ManageEngine 13 (13790 build) XSS / File Read / File Deletion
This issue has been reported to the vendor who has already published patches for this issue. https://www.manageengine.com/products/applicationsmanager/issues.html ========================== Advisory:Zoho manageengine Applications Manager Reflected XSSVulnerability Author: M3 From DBAppSecurity...
ManageEngine Applications Manager SQL Injection
SQL Injection vulnerability in ManageEngine Applications Manager jusername parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
ManageEngine Applications MyPage.do Manager SQL Injection
SQL Injection vulnerability in ManageEngine Applications Manager MyPage.do forpage parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...