ManageEngine Password Manager Pro 8.1 SQL Injection Vulnerability

ManageEngine Password Manager Pro version 8.1 suffers from a remote SQL injection vulnerability. Title: ManageEngine Password Manager Pro SQL 8.1 Injection vulnerability Author: Blazej Adamczyk br0x Download site: https://www.manageengine.com/products/passwordmanagerpro/download.html Version: 8.1...

ManageEngine Asset Explorer v6.1 - Persistent Vulnerability

Document Title: =============== ManageEngine Asset Explorer v6.1 - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1488 Release Date: ============= 2015-06-22 Vulnerability Laboratory ID VL-ID: ===================================...

ZOHO ManageEngine Desktop Central MSP 'InventorySWMeteringServlet' Arbitrary File Upload Vulnerability

ZOHO ManageEngine Desktop Central MSP is a desktop and mobile device management software for MSPs. The software enables MSPs to remotely manage desktops, servers, and mobile devices in their customer networks and provide differentiated management services for organizations of all sizes. An...

ZOHO ManageEngine Desktop Central MSP 'AndroidCheckInServlet' Servlet Remote Code Execution Vulnerability

ZOHO ManageEngine Desktop Central MSP is a desktop and mobile device management software for MSPs. The software enables MSPs to remotely manage desktops, servers, and mobile devices in their customer networks and provide differentiated management services for organizations of all sizes. A securit...

ZOHO ManageEngine SupportCenter Plus Cross-Site Scripting Vulnerability

ZOHO ManageEngine SupportCenter Plus is a customer service support management software from ZOHO USA. The software provides help desk, customer management, service level management and tracking of customer requests. A cross-site scripting vulnerability exists in ZOHO ManageEngine SupportCenter Pl...

ManageEngine Password Manager Pro 8.1 SQL Injection

Title: ManageEngine Password Manager Pro SQL 8.1 Injection vulnerability Author: Blazej Adamczyk br0x Date: 2015-06-30 Download site: https://www.manageengine.com/products/passwordmanagerpro/download.html Version: 8.1 and below Vendor: https://www.manageengine.com/products/passwordmanagerpro/...

CVE-2015-5150

Multiple cross-site scripting XSS vulnerabilities in Zoho ManageEngine SupportCenter Plus 7.90 allow remote authenticated users to inject arbitrary web script or HTML via the 1 query parameter in the runqueryeditorquery module to CustomReportHandler.do, 2 compAcct parameter to jsp/ResetADPwd.jsp,...

CVE-2015-5149

Directory traversal vulnerability in Zoho ManageEngine SupportCenter Plus 7.90 allows remote authenticated users to write to arbitrary files via a .. dot dot in the component parameter in the Request component to workorder/Attachment.jsp...

Directory traversal

Directory traversal vulnerability in Zoho ManageEngine SupportCenter Plus 7.90 allows remote authenticated users to write to arbitrary files via a .. dot dot in the component parameter in the Request component to workorder/Attachment.jsp...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Zoho ManageEngine SupportCenter Plus 7.90 allow remote authenticated users to inject arbitrary web script or HTML via the 1 query parameter in the runqueryeditorquery module to CustomReportHandler.do, 2 compAcct parameter to jsp/ResetADPwd.jsp,...

CVE-2015-5149

Directory traversal vulnerability in Zoho ManageEngine SupportCenter Plus 7.90 allows remote authenticated users to write to arbitrary files via a .. dot dot in the component parameter in the Request component to workorder/Attachment.jsp...

CVE-2015-5150

Multiple cross-site scripting XSS vulnerabilities in Zoho ManageEngine SupportCenter Plus 7.90 allow remote authenticated users to inject arbitrary web script or HTML via the 1 query parameter in the runqueryeditorquery module to CustomReportHandler.do, 2 compAcct parameter to jsp/ResetADPwd.jsp,...

CVE-2015-5150

The CVE-2015-5150 entry concerns Zoho ManageEngine SupportCenter Plus version 7.90, where three XSS vectors exist: (1) the query parameter in run_query_editor_query via CustomReportHandler.do, (2) the compAcct parameter to jsp/ResetADPwd.jsp, and (3) the redirectTo parameter to jsp/CacheScreenWid...

CVE-2015-5149

CVE-2015-5149 affects Zoho ManageEngine SupportCenter Plus 7.90. A directory traversal flaw in the workorder/Attachment.jsp path allows remote authenticated users to write arbitrary files by manipulating the component parameter (using .. style traversal). The vulnerability is caused by insufficie...

ManageEngine EventLog Analyzer Cross Site Request Forgery

A cross site request forgery vulnerability exists in ManageEngine EventLog Analyzer. The vulnerability is due to insufficient input validation of parameters sent to event/userManagementForm.do. By convincing a user to follow a malicious link, a remote attacker can exploit this vulnerability to...

Zoho ManageEngine AssetExplorer Cross-Site Scripting Vulnerability (CNVD-2015-04108)

Zoho ManageEngine AssetExplorer is a suite of asset management software from Zoho ZOHO. A cross-site scripting vulnerability exists in ZOHO ManageEngine AssetExplorer version 6.1 due to the VendorDef.do file failing to adequately filter the 'organizationName' parameter. A remote attacker can...

ZOHO ManageEngine AssetExplorer Cross-Site Scripting Vulnerability

ZOHO ManageEngine AssetExplorer is a suite of asset management software. The software provides asset tracking, scanning of IT assets and tracking of asset ownership. ZOHO ManageEngine AssetExplorer handles a cross-site scripting vulnerability in Publisher registry entries, which allows remote...

ManageEngine Asset Explorer 6.1 - Persistent Cross-Site Scripting

ManageEngine Asset Explorer 6.1 - Persistent Cross-Site Scripting Title: =============== ManageEngine Asset Explorer v6.1 - XSS Vulnerability CVE-ID: ==================================== CVE-2015-2169 CVSS: ==================================== 3.5 Product & Service Introduction Taken from their...

ManageEngine Asset Explorer 6.1 - Persistent Cross-Site Scripting

Title: =============== ManageEngine Asset Explorer v6.1 - XSS Vulnerability CVE-ID: ==================================== CVE-2015-2169 CVSS: ==================================== 3.5 Product & Service Introduction Taken from their homepage: ==================================== ManageEngine...

ManageEngine Asset Explorer 6.1 Cross Site Scripting Vulnerability

ManageEngine Asset Explorer version 6.1 suffers from a persistent cross site scripting vulnerability. Title: =============== ManageEngine Asset Explorer v6.1 - XSS Vulnerability CVE-ID: ==================================== CVE-2015-2169 CVSS: ==================================== 3.5 Product &...