CVE-2019-16962

Zoho ManageEngine Desktop Central 10.0.430 allows HTML injection via a modified Report Name in a New Custom Report...

PT-2021-8996

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Desktop Central version 10.0.430 Description The issue allows HTML injection via a modified Report Name in a New Custom Report. This can occur when a user creates a new custom report and modifies the report name to include...

ZOHO ManageEngine Desktop Central 注入漏洞

Zoho ManageEngine Desktop Central is integrated desktop and mobile device management software that helps manage servers, laptops, desktops, smartphones and tablets from a central location. An HTML injection vulnerability exists in Zoho ManageEngine Desktop Central 10.0.430. The vulnerability can ...

CVE-2019-16962: Improper Neutralization of Input During Web Page Generation

Zoho ManageEngine Desktop Central 10.0.430 allows HTML injection via a modified Report Name in a New Custom Report...

Zoho ManageEngine SDP Arbitrary File Upload (CVE-2019-8394)

An arbitrary file upload vulnerability exists in Zoho ManageEngine SDP. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

ManageEngine ServiceDesk Plus < 10.0 Build 10012 Arbitrary File Upload

An arbitrary file upload vulnerability exists in ManageEngine ServiceDesk Plus. A low privilege authenticated, remote attacker can exploit this by uploading arbitrary files to the remote host with the potential to execute arbitrary code on the server. Note that Nessus has not tested for these...

Zoho ManageEngine Applications Manager Arbitrary File Upload (CVE-2020-14008)

An arbitrary file upload vulnerability exists in Zoho ManageEngine Applications Manager. The vulnerability is due to improper validation of user supplied data in UploadAction. Successful exploitation could result in uploading potentially dangerous file which may lead to arbitrary code execution...

Zoho ManageEngine Applications Manager SQL Injection (CVE-2020-27995)

A SQL injection vulnerability exists in the Zoho ManageEngine Applications Manager. The vulnerability is due to improper validation of user-supplied input in processing MyPage.do action...

PT-2020-16911

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Desktop Central versions prior to 10.0.647 Description The issue allows a single authentication secret from multiple agents to communicate with the server. Recommendations For versions prior to 10.0.647, update to build...

Zoho ManageEngine Application Manager SQL Injection Vulnerability (CNVD-2021-05408)

ZOHO ManageEngine Application Manager is a set of application monitoring and management system of the United States ZhuoHao ZOHO company. The system is mainly used to monitor server and application performance. A SQL injection vulnerability exists in Zoho ManageEngine Application Manager 14.7 Bui...

ZOHO ManageEngine Applications Manager SQL Injection Vulnerability (CNVD-2020-60827)

ZOHO ManageEngine Applications Manager is a set of IT operation and maintenance management solutions of the United States ZhuoHao ZOHO company. The product has application performance management, fault management, report generation and SLA management and other functions. A SQL injection...

CVE-2020-27995

SQL Injection in Zoho ManageEngine Applications Manager 14 before 14560 allows an attacker to execute commands on the server via the MyPage.do templateresid parameter...

CVE-2020-27995

SQL Injection in Zoho ManageEngine Applications Manager 14 before 14560 allows an attacker to execute commands on the server via the MyPage.do templateresid parameter...

Sql injection

SQL Injection in Zoho ManageEngine Applications Manager 14 before 14560 allows an attacker to execute commands on the server via the MyPage.do templateresid parameter...

CVE-2020-27995

SQL Injection in Zoho ManageEngine Applications Manager 14 before 14560 allows an attacker to execute commands on the server via the MyPage.do templateresid parameter...

CVE-2020-27995

CVE-2020-27995 affects Zoho ManageEngine Applications Manager 14.x prior to 14560. The vulnerability is an SQL injection in the MyPage.do action that allows an attacker to execute commands on the server via the template_resid parameter, caused by improper validation of user-supplied input. Impact...

CVE-2020-27995: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in Zoho ManageEngine Applications Manager 14 before 14560 allows an attacker to execute commands on the server via the MyPage.do templateresid parameter...

PT-2020-16897

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Applications Manager version 14 before 14560 Description The issue allows an attacker to execute commands on the server. This is achieved via the template resid parameter in the "MyPage.do" endpoint. Recommendations For Zoho...

ZOHO ManageEngine ADSelfService Plus Information Disclosure (CVE-2010-3272)

An information disclosure vulnerability exists in ZOHO ManageEngine ADSelfService Plus. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Zoho ManageEngine Desktop Central Input Validation Error Vulnerability

ZOHO ManageEngine Desktop Central DC and Desktop Central DC are both products of ZOHO, Inc. ManageEngine Desktop Central is a desktop management solution. ManageEngine Desktop Central is a desktop management solution that includes software distribution, patch management, system configuration,...