CVE-2023-48646

Zoho ManageEngine RecoveryManager Plus before 6070 is affected by a command-injection vulnerability that allows admin users to execute arbitrary commands via proxy settings. The root cause is improper handling/neutralization of input in the affected component (getEscapedValue) and related proxy c...

PT-2023-7559 · Zoho · Zoho Manageengine Recovery Manager Plus

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine RecoveryManager Plus versions prior to 6070 Description: The issue allows admin users to execute arbitrary commands via proxy settings. This is due to a failure to neutralize special elements, which can be exploited by a...

CVE-2023-48646

Zoho ManageEngine RecoveryManager Plus before 6070 allows admin users to execute arbitrary commands via proxy settings...

ManageEngine Recovery Manager Plus getEscapedValue Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of ManageEngine Recovery Manager Plus. Authentication is required to exploit this vulnerability. The specific flaw exists within the getEscapedValue method. The issue results from the lack of proper...

Donations Made Easy - Smart Donations <= 4.0.12 - Admin+ SQLi

Description The plugin does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin...

Cross site scripting

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Codeboxr CBX Map for Google Map & OpenStreetMap plugin = 1.1.11 versions...

ManageEngine ServiceDesk Plus MSP < 14.0 Build 14001

The version of ManageEngine ServiceDesk Plus MSP installed on the remote host is prior to 14.0 Build 14001. It is, therefore, affected by a vulnerability as referenced in the service-desk-mspCVE-2023-26601 advisory. - Zoho ManageEngine ServiceDesk Plus through 14104, Asset Explorer through 6987,...

ManageEngine SupportCenter Plus < 14.3 Build 14300

The version of ManageEngine SupportCenter Plus installed on the remote host is prior to 14.3 Build 14300. It is, therefore, affected by a vulnerability as referenced in the support-centerCVE-2023-34197 advisory. - Zoho ManageEngine ServiceDesk Plus before 14202, ServiceDesk Plus MSP before 14300,...

ManageEngine ServiceDesk Plus < 14.1 Build 14103

The version of ManageEngine ServiceDesk Plus installed on the remote host is prior to 14.1 Build 14103. It is, therefore, affected by a vulnerability as referenced in the service-deskCVE-2023-23073 advisory. - Cross site scripting XSS vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via PO ...

ManageEngine ServiceDesk Plus MSP < 14.0 Build 14000

The version of ManageEngine ServiceDesk Plus MSP installed on the remote host is prior to 14.0 Build 14000. It is, therefore, affected by a vulnerability as referenced in the service-desk-mspCVE-2023-26600 advisory. - ManageEngine ServiceDesk Plus through 14104, ServiceDesk Plus MSP through 14000...

ManageEngine SupportCenter Plus < 11.0 Build 11025

The version of ManageEngine SupportCenter Plus installed on the remote host is prior to 11.0 Build 11025. It is, therefore, affected by a vulnerability as referenced in the support-centercve-2022-40773 advisory. - Zoho ManageEngine ServiceDesk Plus MSP before 10609 and SupportCenter Plus before...

ManageEngine SupportCenter Plus < 11.0 Build 11023

The version of ManageEngine SupportCenter Plus installed on the remote host is prior to 11.0 Build 11023, 11.0 Build 11023, 11.0 Build 11023. It is, therefore, affected by a vulnerability as referenced in the support- centercve-2022-36412 advisory. - In Zoho ManageEngine SupportCenter Plus before...

ManageEngine SupportCenter Plus < 14.2 Build 14200

The version of ManageEngine SupportCenter Plus installed on the remote host is prior to 14.2 Build 14200. It is, therefore, affected by a vulnerability as referenced in the support-centerCVE-2023-38331 advisory. - Zoho ManageEngine Support Center Plus 14001 and below is vulnerable to stored XSS i...

ManageEngine ServiceDesk Plus < 13.0 Build 13008

The version of ManageEngine ServiceDesk Plus installed on the remote host is prior to 13.0 Build 13008. It is, therefore, affected by a vulnerability as referenced in the service-deskcve-2022-35403 advisory. - Zoho ManageEngine ServiceDesk Plus before 13008, ServiceDesk Plus MSP before 10606, and...

ManageEngine SupportCenter Plus < 11.0 Build 11022

The version of ManageEngine SupportCenter Plus installed on the remote host is prior to 11.0 Build 11022. It is, therefore, affected by a vulnerability as referenced in the support-centercve-2022-35403 advisory. - Zoho ManageEngine ServiceDesk Plus before 13008, ServiceDesk Plus MSP before 10606,...

ManageEngine ServiceDesk Plus < 14.1 Build 14104

The version of ManageEngine ServiceDesk Plus installed on the remote host is prior to 14.1 Build 14104. It is, therefore, affected by a vulnerability as referenced in the service-deskCVE-2023-23074 advisory. - Cross site scripting XSS vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via...

ManageEngine ServiceDesk Plus MSP < 10.6 Build 10606

The version of ManageEngine ServiceDesk Plus MSP installed on the remote host is prior to 10.6 Build 10606. It is, therefore, affected by a vulnerability as referenced in the service-desk-mspcve-2022-35403 advisory. - Zoho ManageEngine ServiceDesk Plus before 13008, ServiceDesk Plus MSP before...

ManageEngine ServiceDesk Plus MSP < 10.6 Build 10609

The version of ManageEngine ServiceDesk Plus MSP installed on the remote host is prior to 10.6 Build 10609. It is, therefore, affected by a vulnerability as referenced in the service-desk-mspcve-2022-40773 advisory. - Zoho ManageEngine ServiceDesk Plus MSP before 10609 and SupportCenter Plus befo...

ManageEngine ServiceDesk Plus MSP < 14.0 Build 14000

The version of ManageEngine ServiceDesk Plus MSP installed on the remote host is prior to 14.0 Build 14000. It is, therefore, affected by a vulnerability as referenced in the service-desk-mspCVE-2023-23078 advisory. - Cross site scripting XSS vulnerability in Zoho ManageEngine ServiceDesk Plus 14...

ManageEngine ServiceDesk Plus MSP < 14.3 Build 14300

The version of ManageEngine ServiceDesk Plus MSP installed on the remote host is prior to 14.3 Build 14300. It is, therefore, affected by a vulnerability as referenced in the service-desk-mspCVE-2023-34197 advisory. - Zoho ManageEngine ServiceDesk Plus before 14202, ServiceDesk Plus MSP before...