WordPress 插件 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in Wordpress Zoho CRM Lead Magnet plugin version 1.7.2.4, which...

CVE-2021-41288

Zoho ManageEngine OpManager version 125466 and below is vulnerable to SQL Injection in the getReportData API...

Sql injection

Zoho ManageEngine OpManager version 125466 and below is vulnerable to SQL Injection in the getReportData API...

CVE-2021-41288

Zoho ManageEngine OpManager version 125466 and below is vulnerable to SQL Injection in the getReportData API...

CVE-2021-41288

CVE-2021-41288 affects Zoho ManageEngine OpManager (version 125466 and earlier). A SQL injection vulnerability exists in the getReportData API due to insufficient validation of HTTP request parameters, enabling an attacker to manipulate/compromise the application database. NVD lists CVSS vectors:...

CVE-2021-41829

Zoho ManageEngine Remote Access Plus before 10.1.2121.1 relies on the application's build number to calculate a certain encryption key...

CVE-2021-41828

Zoho ManageEngine Remote Access Plus before 10.1.2121.1 has hardcoded credentials associated with resetPWD.xml...

CVE-2021-41827

Zoho ManageEngine Remote Access Plus before 10.1.2121.1 has hardcoded credentials for read-only access. The credentials are in the source code that corresponds to the DCBackupRestore JAR archive...

Hardcoded credentials

Zoho ManageEngine Remote Access Plus before 10.1.2121.1 has hardcoded credentials for read-only access. The credentials are in the source code that corresponds to the DCBackupRestore JAR archive...

Hardcoded credentials

Zoho ManageEngine Remote Access Plus before 10.1.2121.1 has hardcoded credentials associated with resetPWD.xml...

CVE-2021-41829

Zoho ManageEngine Remote Access Plus before 10.1.2121.1 relies on the application's build number to calculate a certain encryption key...

Code injection

Zoho ManageEngine Remote Access Plus before 10.1.2121.1 relies on the application's build number to calculate a certain encryption key...

CVE-2021-41827

CVE-2021-41827 affects Zoho ManageEngine Remote Access Plus prior to 10.1.2121.1. The issue is a hardcoded credential set for read-only access found in the source of the DCBackupRestore JAR archive, enabling potential unauthorized read access if exploited. Public references in the provided docume...

CVE-2021-41827

Zoho ManageEngine Remote Access Plus before 10.1.2121.1 has hardcoded credentials for read-only access. The credentials are in the source code that corresponds to the DCBackupRestore JAR archive...

CVE-2021-41828

Zoho ManageEngine Remote Access Plus before 10.1.2121.1 has hardcoded credentials associated with resetPWD.xml...

CVE-2021-41828

Zoho ManageEngine Remote Access Plus is affected by a hard-coded credentials issue tied to resetPWD.xml, exposed in versions before 10.1.2121.1. The vulnerability could allow unauthorized access via the trust management mechanism. Relevant connected documents corroborate hard-coded credentials in...

CVE-2021-41829

Zoho ManageEngine Remote Access Plus before 10.1.2121.1 relies on the application's build number to calculate a certain encryption key...

CVE-2021-41829

CVE-2021-41829 affects Zoho ManageEngine Remote Access Plus prior to 10.1.2121.1, where an encryption key is derived from the application’s build number. The Red Hat and NVD entries corroborate the same description. No exploit details are provided in the connected documents. Mitigation is to upgr...

Zoho ManageEngine Remote Access Plus 信任管理问题漏洞

ZOHO ManageEngine Remote Access Plus is a remote access solution from ZOHO, Inc. A trust management issue vulnerability previously existed in Zoho ManageEngine Remote Access Plus 10.1.2121.1, which stems from the fact that the affected product has hard-coded credentials associated with resetPWD.x...

ZOHO ManageEngine Remote Access Plus 安全特征问题漏洞

ZOHO ManageEngine Remote Access Plus is a remote access solution from ZOHO, Inc. A security signature issue vulnerability previously existed in Zoho ManageEngine Remote Access Plus 10.1.2121.1, which stemmed from the affected product relying on the application's internal version number to calcula...