6474 matches found
ManageEngine Desktop Central - Create Administrator Vulnerability
Exploit for multiple platform in category web applications Administrator account creation in ManageEngine Desktop Central / Desktop Central MSP Discovered by Pedro Ribeiro email protected, Agile Information Security =================================================================================...
ManageEngine EventLog Analyzer - Multiple Vulnerabilities (2)
Exploit for multiple platform in category web applications Multiple vulnerabilities in ManageEngine EventLog Analyzer Discovered by Pedro Ribeiro email protected, Agile Information Security ========================================================================== Disclosure: 05/11/2014 / Last...
CVE-2014-7862
The DCPluginServelet servlet in ManageEngine Desktop Central and Desktop Central MSP before build 90109 allows remote attackers to create administrator accounts via an addPlugInUser action...
Deserialization of untrusted data
The DCPluginServelet servlet in ManageEngine Desktop Central and Desktop Central MSP before build 90109 allows remote attackers to create administrator accounts via an addPlugInUser action...
CVE-2014-7862
CVE-2014-7862 affects ManageEngine Desktop Central/Desktop Central MSP via the DCPluginServelet; unauthenticated remote attackers can create administrator accounts using addPlugInUser, with pre-90109 builds vulnerable. Public PoC/exploit references exist (Exploit-DB 43892; Rapid7 Metasploit modul...
CVE-2014-7862
The DCPluginServelet servlet in ManageEngine Desktop Central and Desktop Central MSP before build 90109 allows remote attackers to create administrator accounts via an addPlugInUser action...
CVE-2014-7862: Undefined Security Weakness
The DCPluginServelet servlet in ManageEngine Desktop Central and Desktop Central MSP before build 90109 allows remote attackers to create administrator accounts via an addPlugInUser action...
PT-2018-4293
Name of the Vulnerable Software and Affected Versions ManageEngine Desktop Central versions prior to build 90109 ManageEngine Desktop Central MSP versions prior to build 90109 Description The issue allows remote attackers to create administrator accounts. This is achieved through the...
ManageEngine ServiceDesk DownloadFileServlet Information Disclosure (CVE-2017-11511)
An information disclosure vulnerability exists within ManageEngine ServiceDesk for Microsoft Windows. The vulnerability is due to the way ServiceDesk handles download requests. A successful attack could lead to stolen system information...
ManageEngine Password Manager Pro Multiple XSS Vulnerabilities (Dec 2017)
ManageEngine Password Manager Pro is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...
Cross site scripting
Zoho ManageEngine Password Manager Pro 9 before 9.4 9400 has reflected XSS in SearchResult.ec and BulkAccessControlView.ec...
CVE-2017-17698
Zoho ManageEngine Password Manager Pro 9 before 9.4 9400 has reflected XSS in SearchResult.ec and BulkAccessControlView.ec...
CVE-2017-17698
CVE-2017-17698 affects Zoho ManageEngine Password Manager Pro 9 before 9.4 (9400). The issue is a reflected Cross‑Site Scripting (XSS) vulnerability in two files, SearchResult.ec and BulkAccessControlView.ec, as described in multiple sources. The vulnerability arises from improper handling of inp...
CVE-2017-17698: Improper Neutralization of Input During Web Page Generation
Zoho ManageEngine Password Manager Pro 9 before 9.4 9400 has reflected XSS in SearchResult.ec and BulkAccessControlView.ec...
PT-2017-14958
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Password Manager Pro version 9 before 9.4 9400 Description The issue is related to reflected XSS in SearchResult.ec and BulkAccessControlView.ec. Recommendations For Zoho ManageEngine Password Manager Pro version 9 before 9.4...
ZOHO ManageEngine Applications Manager SQL Injection Vulnerability (CNVD-2017-37180)
ZOHO ManageEngine Applications Manager is a set of IT operation and maintenance management solutions of the United States ZhuoHao ZOHO company. The product has application performance management, fault management, report generation and SLA management and other functions. A SQL injection...
ZOHO ManageEngine Applications Manager SQL Injection Vulnerability (CNVD-2017-37248)
ZOHO ManageEngine Applications Manager is a set of IT operation and maintenance management solutions of the United States ZhuoHao ZOHO company. The product has application performance management, fault management, report generation and SLA management and other functions. A SQL injection...
ZOHO ManageEngine Applications Manager SQL Injection Vulnerability (CNVD-2017-37247)
ZOHO ManageEngine Applications Manager is a set of IT operation and maintenance management solutions of the United States ZhuoHao ZOHO company. The product has application performance management, fault management, report generation and SLA management and other functions. A SQL injection...
ZOHO ManageEngine Applications Manager SQL Injection Vulnerability (CNVD-2017-37182)
ZOHO ManageEngine Applications Manager is a set of IT operations management solutions from ZOHO. A SQL injection vulnerability exists in ZOHO ManageEngine Applications Manager version 13. The vulnerability can be exploited by a remote attacker to inject SQL statements using the 'widgetid' paramet...