294 matches found
CVE-2019-12540
An issue was discovered in Zoho ManageEngine ServiceDesk Plus 10.5. There is XSS via the WorkOrder.do search field...
CVE-2019-12537
An issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via the SearchN.do search field...
CVE-2019-12539
An issue was discovered in the Purchase component of Zoho ManageEngine ServiceDesk Plus. There is XSS via the SearchN.do search field, a different vulnerability than CVE-2019-12189...
CVE-2019-12540
An issue was discovered in Zoho ManageEngine ServiceDesk Plus 10.5. There is XSS via the WorkOrder.do search field...
CVE-2019-12540: Improper Neutralization of Input During Web Page Generation
An issue was discovered in Zoho ManageEngine ServiceDesk Plus 10.5. There is XSS via the WorkOrder.do search field...
PT-2019-12844
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ServiceDesk Plus version 10.5 Description An issue was discovered in the software, where there is a possibility of XSS via the WorkOrder.do search field. Recommendations For Zoho ManageEngine ServiceDesk Plus version 10.5,...
CVE-2019-12538
An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SiteLookup.do search field...
Design/Logic Flaw
An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SiteLookup.do search field...
CVE-2019-12538
An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SiteLookup.do search field...
PT-2019-12842
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ServiceDesk Plus version 9.3 Description An issue was discovered that allows for XSS via the SiteLookup.do search field. Recommendations For Zoho ManageEngine ServiceDesk Plus version 9.3, consider restricting access to the...
CVE-2019-12538: Improper Neutralization of Input During Web Page Generation
An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SiteLookup.do search field...
CVE-2019-12189
An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SearchN.do search field...
CVE-2019-12189: Improper Neutralization of Input During Web Page Generation
An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SearchN.do search field...
CVE-2019-7437
PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected Cross-Site Scripting XSS via the Search field...
Cross site scripting
PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected Cross-Site Scripting XSS via the Search field...
PHP Scripts Mall Classified Ads Script Cross-Site Scripting Vulnerability
PHP Scripts Mall Classified Ads Script is a classified ads script. PHP Scripts Mall Classified Ads Script 3.2.2 suffers from a reflected cross-site scripting vulnerability. The vulnerability can be exploited to conduct a cross-site scripting attack via a search field...
CVE-2019-7437
PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected Cross-Site Scripting XSS via the Search field...
PT-2019-18610
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Opensource Classified Ads Script version 3.2.2 Description The issue is related to reflected Cross-Site Scripting XSS that can be triggered via the Search field. This allows an attacker to inject malicious scripts into the...
CVE-2019-7437: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Opensource Classified Ads Script 3.2.2 has reflected Cross-Site Scripting XSS via the Search field...