ZOHO ManageEngine SupportCenter Plus Cross-Site Scripting Vulnerability (CNVD-2018-19734)

ZOHO ManageEngine SupportCenter Plus is a suite of customer service support management software from ZOHO USA. The software provides help desk, customer management, service level management and tracking of customer requests. A cross-site scripting vulnerability exists in ZOHO ManageEngine...

CVE-2018-16965

In Zoho ManageEngine SupportCenter Plus before 8.1 Build 8109, there is HTML Injection and Stored XSS via the /ServiceContractDef.do contractName parameter...

PT-2018-13800

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine SupportCenter Plus versions prior to 8.1 Build 8109 Description The issue concerns HTML Injection and Stored XSS. It can be exploited via the /ServiceContractDef.do contractName parameter. Recommendations For versions prior t...

CVE-2018-16965: Improper Neutralization of Input During Web Page Generation

In Zoho ManageEngine SupportCenter Plus before 8.1 Build 8109, there is HTML Injection and Stored XSS via the /ServiceContractDef.do contractName parameter...