3546 matches found
ZOHO多款产品 安全漏洞
ZOHO ManageEngine OpManager and others are products of ZOHO Corporation.ZOHO ManageEngine OpManager is a comprehensive network monitoring software.ZOHO ManageEngine OpManager Plus is an IT operations management solution for Windows and Linux systems. ZOHO ManageEngine OpManager Plus is an IT...
ZOHO ManageEngine Exchange Reporter Plus 安全漏洞
ZOHO ManageEngine Exchange Reporter Plus is a Web-based Exchange Server reporting software from ZOHO, Inc. A security vulnerability exists in ZOHO ManageEngine Exchange Reporter Plus version 5717 and prior versions. An attacker can exploit this vulnerability to perform SQL injection attacks...
CVE-2024-38696
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Zoho CRM Zoho CRM Lead Magnet allows Reflected XSS.This issue affects Zoho CRM Lead Magnet: from n/a through 1.7.8.8...
CVE-2024-38696
CVE-2024-38696 refers to a Reflected XSS in the Zoho CRM Lead Magnet WordPress plugin. The connected PT report (PT-2024-28140) states the issue stems from Improper Neutralization of Input During Web Page Generation and affects Zoho CRM Lead Magnet versions up to and including 1.7.8.8 . The root c...
CVE-2024-38696 WordPress Zoho CRM Lead Magnet plugin <= 1.7.8.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Zoho CRM Zoho CRM Lead Magnet allows Reflected XSS.This issue affects Zoho CRM Lead Magnet: from n/a through 1.7.8.8...
CVE-2024-38696 WordPress Zoho CRM Lead Magnet plugin <= 1.7.8.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Zoho CRM Zoho CRM Lead Magnet allows Reflected XSS.This issue affects Zoho CRM Lead Magnet: from n/a through 1.7.8.8...
WordPress Zoho Campaigns plugin <= 2.0.8 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin Zoho Campaigns versions = 2.0.8...
WordPress Zoho CRM Lead Magnet plugin <= 1.7.8.8 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Dimas Maulana Patchstack Alliance in WordPress Plugin Zoho CRM Lead Magnet versions = 1.7.8.8...
WordPress Zoho Campaigns Plugin <= 2.0.8 is vulnerable to Cross Site Scripting (XSS)
Software Zoho Campaigns Type Plugin Vulnerable versions = 2.0.8 Fixed in 2.1.0 OWASP Top 10 A4: Insecure Design Classification Cross Site Scripting XSS CVE CVE-2024-38752 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 48112379bb70 Credits Majed Refaea Required...
WordPress Zoho CRM Lead Magnet Plugin <= 1.7.8.8 is vulnerable to Cross Site Scripting (XSS)
Software Zoho CRM Lead Magnet Type Plugin Vulnerable versions = 1.7.8.8 Fixed in 1.7.8.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-38696 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 67a915d6b2e4 Credits Dimas Maulana Required...
CVE-2024-37225
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Zoho Marketing Automation.This issue affects Zoho Marketing Automation: from n/a through 1.2.7...
CVE-2024-37225
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Zoho Marketing Automation.This issue affects Zoho Marketing Automation: from n/a through 1.2.7...
CVE-2024-37225 WordPress Zoho Marketing Automation plugin <= 1.2.7 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Zoho Marketing Automation.This issue affects Zoho Marketing Automation: from n/a through 1.2.7...
CVE-2024-37225
CVE-2024-37225 is a WordPress/plugin vulnerability in Zoho Marketing Automation (WordPress plugin) that permits an authenticated (Contributor+) SQL Injection against Zoho Marketing Automation versions n/a–1.2.7. The available connected data confirms a SQL injection in the plugin, with impact desc...
CVE-2024-37225 WordPress Zoho Marketing Automation plugin <= 1.2.7 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Zoho Marketing Automation.This issue affects Zoho Marketing Automation: from n/a through 1.2.7...
WordPress plugin Zoho Marketing Automation SQL Injection Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A SQL injection vulnerability exists ...
VulnCheck KEV: CVE-2023-38743
Zoho ManageEngine ADManager Plus before Build 7200 allows admin users to execute commands on the host machine...
CVE-2024-36038
Zoho ManageEngine ITOM products versions from 128234 to 128248 are affected by the stored cross-site scripting vulnerability in the proxy server option...
CVE-2024-36038
CVE-2024-36038 relates to a stored cross-site scripting vulnerability in the proxy server option of Zoho ManageEngine ITOM/OpManager. Affected software: OpManager 12.8.234 with proxy server configuration; affected version range cited as 128234–128248. Root cause: stored XSS in the proxy server fu...