CVE-2018-10076

An issue was discovered in Zoho ManageEngine EventLog Analyzer 11.12. A Cross-Site Scripting vulnerability allows a remote attacker to inject arbitrary web script or HTML via the search functionality the search box of the Dashboard...

CVE-2018-10075

Cross-site scripting XSS vulnerability in Zoho ManageEngine EventLog Analyzer 11.12 allows remote attackers to inject arbitrary web script or HTML via the import logs feature...

Cross site scripting

An issue was discovered in Zoho ManageEngine EventLog Analyzer 11.12. A Cross-Site Scripting vulnerability allows a remote attacker to inject arbitrary web script or HTML via the search functionality the search box of the Dashboard...

CVE-2018-10075

Cross-site scripting XSS vulnerability in Zoho ManageEngine EventLog Analyzer 11.12 allows remote attackers to inject arbitrary web script or HTML via the import logs feature...

CVE-2018-10075

Zoho ManageEngine EventLog Analyzer 11.12 is affected by an XSS vulnerability that can be exploited remotely via the import logs feature. The issue allows an attacker to inject arbitrary web script or HTML when processing logs. Connected sources (NVD, CNVD, PRION, CVELIST) confirm the product/ver...

CVE-2018-10076

Zoho ManageEngine EventLog Analyzer 11.12 is affected by a Cross-Site Scripting vulnerability that allows remote attackers to inject arbitrary web script or HTML via the search box on the Dashboard. The issue is documented in CVE-2018-10076 (also referenced in CNVD-2018-17643). Exploitation detai...

CVE-2018-10076

An issue was discovered in Zoho ManageEngine EventLog Analyzer 11.12. A Cross-Site Scripting vulnerability allows a remote attacker to inject arbitrary web script or HTML via the search functionality the search box of the Dashboard...

CVE-2018-13050

A SQL Injection vulnerability exists in Zoho ManageEngine Applications Manager 13.x before build 13800 via the jusername parameter in a /jsecuritycheck POST request...

Sql injection

A SQL Injection vulnerability exists in Zoho ManageEngine Applications Manager 13.x before build 13800 via the jusername parameter in a /jsecuritycheck POST request...

CVE-2018-13050

A SQL Injection vulnerability exists in Zoho ManageEngine Applications Manager 13.x before build 13800 via the jusername parameter in a /jsecuritycheck POST request...

CVE-2018-13050

A SQL Injection vulnerability exists in Zoho ManageEngine Applications Manager 13.x before build 13800 via the jusername parameter in a /jsecuritycheck POST request...

CVE-2018-13050

CVE-2018-13050 affects Zoho ManageEngine Applications Manager 13.x before build 13800. The vulnerability is a SQL Injection in the j_username parameter processed by a POST to /j_security_check, enabling arbitrary SQL execution according to the provided sources. Severity is high to critical (CVSS ...

ZOHO ManageEngine Desktop Central Access Control Error Vulnerability

ZOHO ManageEngine Desktop Central DC is a desktop management solution from ZOHO. The solution includes software distribution, patch management, system configuration, remote control and other functional modules to support the entire lifecycle of desktop and server management. An access control err...

PT-2018-9660

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine EventLog Analyzer version 11.12 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the import logs feature. This could potentially lead to unauthorized actions on...

CVE-2018-10075: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Zoho ManageEngine EventLog Analyzer 11.12 allows remote attackers to inject arbitrary web script or HTML via the import logs feature...

CVE-2018-10076: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Zoho ManageEngine EventLog Analyzer 11.12. A Cross-Site Scripting vulnerability allows a remote attacker to inject arbitrary web script or HTML via the search functionality the search box of the Dashboard...

Zoho ManageEngine Applications Manager Cross-Site Scripting Vulnerability (CNVD-2018-17630)

Zoho ManageEngine Applications Manager is an application performance monitoring and management solution for various business monitoring and management needs of enterprises. A cross-site scripting vulnerability exists in versions prior to Zoho ManageEngine Applications Manager 13 Build 13780. A...

PT-2018-11559

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Applications Manager versions 13.x before build 13800 Description A SQL Injection issue exists via the j username parameter in a "/j security check" POST request. Recommendations For versions 13.x before build 13800, update t...

CVE-2018-13050: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability exists in Zoho ManageEngine Applications Manager 13.x before build 13800 via the jusername parameter in a /jsecuritycheck POST request...

PT-2018-9661

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine EventLog Analyzer version 11.12 Description: A Cross-Site Scripting issue allows a remote attacker to inject arbitrary web script or HTML via the search functionality, specifically the search box of the Dashboard...