Design/Logic Flaw

Zoho ManageEngine ADManager Plus 6.5.7 has XSS on the "Workflow Delegation" "Requester Roles" screen...

CVE-2018-15740

Zoho ManageEngine ADManager Plus 6.5.7 contains an XSS vulnerability in the Workflow Delegation > Requester Roles UI. The root cause is a cross-site scripting flaw in that screen, allowing injection of malicious script that could run in an affected user’s browser. Documents consistently identi...

CVE-2018-15608

CVE-2018-15608 affects Zoho ManageEngine ADManager Plus 6.5.7. The issue is HTML Injection on the AD Delegation → Help Desk Technicians screen, indicating user-supplied input could be reflected and interpreted as markup in that UI. The connected documents confirm the vulnerability type as HTML In...

CVE-2018-15608

Zoho ManageEngine ADManager Plus 6.5.7 allows HTML Injection on the "AD Delegation" "Help Desk Technicians" screen...

CVE-2018-15740

Zoho ManageEngine ADManager Plus 6.5.7 has XSS on the "Workflow Delegation" "Requester Roles" screen...

ManageEngine ADManager Plus 6.5.7 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: ManageEngine ADManager Plus 6.5.7 - Cross-Site Scripting Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.manageengine.com/ Hardware Link : https://www.manageengine.com/products/ad-manager/ Software : ZOHO Corp...

CVE-2018-15740: Improper Neutralization of Input During Web Page Generation

Zoho ManageEngine ADManager Plus 6.5.7 has XSS on the "Workflow Delegation" "Requester Roles" screen...

PT-2018-13115

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADManager Plus version 6.5.7 Description The issue allows HTML Injection on the "AD Delegation" "Help Desk Technicians" screen. Recommendations For Zoho ManageEngine ADManager Plus version 6.5.7, consider restricting access t...

CVE-2018-15608: Improper Neutralization of Input During Web Page Generation

Zoho ManageEngine ADManager Plus 6.5.7 allows HTML Injection on the "AD Delegation" "Help Desk Technicians" screen...

PT-2018-13176

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ADManager Plus version 6.5.7 Description The issue concerns a problem with the "Workflow Delegation" "Requester Roles" screen, where there is an XSS issue. Recommendations For Zoho ManageEngine ADManager Plus version 6.5.7, a...

ZOHO ManageEngine ADManager Plus HTML Injection Vulnerability

ZOHO ManageEngine ADManager Plus is an IT operations management software. ZOHO ManageEngine ADManager Plus suffers from an HTML injection vulnerability that can be exploited by attackers to allow HTML injection...

ManageEngine ADManager Plus 6.5.7 Cross Site Scripting

Exploit Title: ManageEngine ADManager Plus 6.5.7 - Stored XSS Date: 2018-08-21 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.manageengine.com/ Hardware Link : https://www.manageengine.com/products/ad-manager/ Software : ZOHO Corp ManageEngine ADManager Plus Product Version: 6.5.7...

ManageEngine ADManager Plus 6.5.7 - Cross-Site Scripting

ManageEngine ADManager Plus 6.5.7 - Cross-Site Scripting Exploit Title: ManageEngine ADManager Plus 6.5.7 - Cross-Site Scripting Date: 2018-08-21 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.manageengine.com/ Hardware Link : https://www.manageengine.com/products/ad-manager/ Softwa...

ManageEngine ADManager Plus 6.5.7 - Cross-Site Scripting

Exploit Title: ManageEngine ADManager Plus 6.5.7 - Cross-Site Scripting Date: 2018-08-21 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.manageengine.com/ Hardware Link : https://www.manageengine.com/products/ad-manager/ Software : ZOHO Corp ManageEngine ADManager Plus Product Versio...

ManageEngine ADManager Plus 6.5.7 - HTML Injection

ManageEngine ADManager Plus 6.5.7 - HTML Injection Exploit Title: ManageEngine ADManager Plus 6.5.7 - HTML Injection Date: 2018-08-21 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.manageengine.com/ Hardware Link : https://www.manageengine.com/products/ad-manager/ Software : ZOHO Co...

ManageEngine ADManager Plus 6.5.7 HTML Injection

Exploit Title: ManageEngine ADManager Plus 6.5.7 - HTML Injection Date: 2018-08-21 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.manageengine.com/ Hardware Link : https://www.manageengine.com/products/ad-manager/ Software : ZOHO Corp ManageEngine ADManager Plus Product Version: 6.5...

ManageEngine ADManager Plus 6.5.7 - HTML Injection

Exploit Title: ManageEngine ADManager Plus 6.5.7 - HTML Injection Date: 2018-08-21 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.manageengine.com/ Hardware Link : https://www.manageengine.com/products/ad-manager/ Software : ZOHO Corp ManageEngine ADManager Plus Product Version: 6.5...

CVE-2018-15168

A SQL Injection vulnerability exists in the Zoho ManageEngine Applications Manager 13 before build 13820 via the resids parameter in a /editDisplaynames.do?method=editDisplaynames GET request...

CVE-2018-15169

A reflected Cross-site scripting XSS vulnerability in Zoho ManageEngine Applications Manager 13 before build 13820 allows remote attackers to inject arbitrary web script or HTML via the /deleteMO.do method parameter...

CVE-2018-15169

A reflected Cross-site scripting XSS vulnerability in Zoho ManageEngine Applications Manager 13 before build 13820 allows remote attackers to inject arbitrary web script or HTML via the /deleteMO.do method parameter...