PT-2012-3052

Name of the Vulnerable Software and Affected Versions ManageEngine Applications Manager versions 9.x through 10.x Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the viewId parameter to "fault/AlarmView.do" or the period parameter to...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ManageEngine ADManager Plus 5.2 Build 5210 allow remote attackers to inject arbitrary web script or HTML via the 1 domainName parameter to jsp/AddDC.jsp or 2 operation parameter to DomainConfig.do...

CVE-2012-1049

CVE-2012-1049 affects ManageEngine ADManager Plus 5.2 (Build 5210). The vulnerability is multiple cross-site scripting (XSS) flaws triggered by user input in the jsp/AddDC.jsp domainName parameter and in DomainConfig.do operation parameter, allowing arbitrary HTML/script execution in a victim’s b...

PT-2012-3040

Name of the Vulnerable Software and Affected Versions ManageEngine ADManager Plus version 5.2 Build 5210 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. Specifically, the...

CVE-2012-1049: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ManageEngine ADManager Plus 5.2 Build 5210 allow remote attackers to inject arbitrary web script or HTML via the 1 domainName parameter to jsp/AddDC.jsp or 2 operation parameter to DomainConfig.do...

Zoho ManageEngine ADManager Plus Multiple Cross Site Scripting Vulnerabilities

This host is running Zoho ManageEngine ADManager Plus and is prone to multiple cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbmanageengineadmanagerplusmultxssvuln.nasl 5950 2017-04-13 09:02:06Z teissa $ Zoho ManageEngine ADManager Plus Multiple Cross Site Scripting...

ManageEngine ADManager Plus Multiple XSS Vulnerabilities

ManageEngine ADManager Plus is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...

ManageEngine ADManager Plus 5.2 Build 5210 - Operation Cross-Site Scripting

ManageEngine ADManager Plus 5.2 Build 5210 - Operation Cross-Site Scripting source: https://www.securityfocus.com/bid/51893/info ManageEngine ADManager Plus is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverag...

ManageEngine ADManager Plus 5.2 Build 5210 - domainName Cross-Site Scripting

ManageEngine ADManager Plus 5.2 Build 5210 - domainName Cross-Site Scripting source: https://www.securityfocus.com/bid/51893/info ManageEngine ADManager Plus is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may levera...

ManageEngine ADManager Plus 5.2 Build 5210 - 'domainName' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51893/info ManageEngine ADManager Plus is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

ManageEngine ADManager Plus 5.2 Build 5210 - 'Operation' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51893/info ManageEngine ADManager Plus is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

ManageEngine ADManager Plus 5.2 Multiple XSS Vulnerabilities

Summary ADManager Plus is a simple, easy-to-use Windows Active Directory Management and Reporting Solution that helps AD Administrators and Help Desk Technicians with their day-to-day activities. Description ADManager Plus suffers from multiple XSS vulnerabilities when parsing user input to the...

ME Monitoring Manager Cross Site Scripting / SQL Injection

Title: ====== ME Monitoring Manager v9.x; v10.x - Multiple Vulnerabilities Date: ===== 2012-01-27 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=115 VL-ID: ===== 115 Introduction: ============= Mit dem ManageEngine Applications Manager können IT-Administratoren von...

ME Monitoring Manager v9.x; v10.x - Multiple Vulnerabilities

Document Title: =============== ME Monitoring Manager v9.x; v10.x - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=115 http://www.cnnvd.org.cn/vulnerability/show/cvid/2012020039 ID: CNNVD-201202-039 Release Date: =============...

ME Monitoring Manager v9.x; v10.x - Multiple Vulnerabilities

Document Title: =============== ME Monitoring Manager v9.x; v10.x - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=115 http://www.cnnvd.org.cn/vulnerability/show/cvid/2012020039 ID: CNNVD-201202-039 Release Date: =============...

ManageEngine ServiceDesk Plus 8.0.0 < Build 8015 Multiple XSS Vulnerabilities

The remote host contains ManageEngine ServiceDesk Plus version 8.0.0 prior to build 8015. It is thus potentially affected by multiple cross-site scripting vulnerabilities. The following pages do not properly sanitize input to the following scripts and parameters : - Page : 'AddSolution.do'...

ManageEngine ADSelfService EmployeeSearch.cc Multiple XSS

The instance of ManageEngine ADSelfService Plus running on the remote web server is affected by multiple cross-site scripting vulnerabilities in the EmployeeSearch.cc script due to improper sanitization of user-supplied input to the 'searchString', 'searchType' and 'actionID' parameters. An...

CVE-2010-5050

Cross-site scripting XSS vulnerability in jsp/admin/tools/remoteshare.jsp in ManageEngine ADManager Plus 4.4.0 allows remote attackers to inject arbitrary web script or HTML via the computerName parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from...

Cross site scripting

Cross-site scripting XSS vulnerability in jsp/admin/tools/remoteshare.jsp in ManageEngine ADManager Plus 4.4.0 allows remote attackers to inject arbitrary web script or HTML via the computerName parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from...

CVE-2010-5050

Affected software: ManageEngine ADManager Plus 4.4.0. Vulnerability location: JSP page jsp/admin/tools/remote_share.jsp, vulnerability in the input handling of the computerName parameter. Root cause / impact: Cross-site scripting (XSS) that allows an attacker to inject arbitrary web script or HTM...