Lucene search
+L

706 matches found

Prion
Prion
•added 2008/03/12 5:44 p.m.•28 views

Cross site scripting

Cross-site scripting XSS vulnerability in SolutionSearch.do in ManageEngine ServiceDesk Plus 7.0.0 Build 7011 for Windows allows remote attackers to inject arbitrary web script or HTML via the searchText parameter. NOTE: the provenance of this information is unknown; the details are obtained sole...

4.3CVSS5.8AI score0.00808EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2008/03/12 5:44 p.m.•41 views

CVE-2008-1299

Cross-site scripting XSS vulnerability in SolutionSearch.do in ManageEngine ServiceDesk Plus 7.0.0 Build 7011 for Windows allows remote attackers to inject arbitrary web script or HTML via the searchText parameter. NOTE: the provenance of this information is unknown; the details are obtained sole...

6.1CVSS5.5AI score0.00808EPSS
SaveExploits0References2
CVE
CVE
•added 2008/03/12 5:00 p.m.•73 views

CVE-2008-1299

CVE-2008-1299 is an XSS vulnerability in ManageEngine ServiceDesk Plus 7.0.0 Build 7011 for Windows, affecting the SolutionSearch.do endpoint. The flaw resides in the searchText parameter, enabling remote attackers to inject arbitrary web script or HTML. Multiple sources (NVD/Red Hat/related reco...

6.1CVSS5.6AI score0.00808EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2008/03/12 5:00 p.m.•47 views

CVE-2008-1299

Cross-site scripting XSS vulnerability in SolutionSearch.do in ManageEngine ServiceDesk Plus 7.0.0 Build 7011 for Windows allows remote attackers to inject arbitrary web script or HTML via the searchText parameter. NOTE: the provenance of this information is unknown; the details are obtained sole...

5.5AI score0.00808EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2008/03/12 5:00 p.m.•8 views

CVE-2008-1299

Cross-site scripting XSS vulnerability in SolutionSearch.do in ManageEngine ServiceDesk Plus 7.0.0 Build 7011 for Windows allows remote attackers to inject arbitrary web script or HTML via the searchText parameter. NOTE: the provenance of this information is unknown; the details are obtained sole...

6.2AI score0.00808EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/03/12 12:00 a.m.•6 views

CVE-2008-1299: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in SolutionSearch.do in ManageEngine ServiceDesk Plus 7.0.0 Build 7011 for Windows allows remote attackers to inject arbitrary web script or HTML via the searchText parameter. NOTE: the provenance of this information is unknown; the details are obtained sole...

6.1CVSS6AI score0.00808EPSS
SaveExploits0References3
Rows per page
Query Builder