CVE-2018-17596

CVE-2018-17596 affects Zoho ManageEngine AssetExplorer (version 6.2.0). The connected documents describe a Stored Cross-Site Scripting (XSS) vulnerability exploitable via the /AssetDef.do endpoint using the ciName or assetName parameter. The vulnerability was publicly disclosed for AssetExplorer ...

ManageEngine AssetExplorer 6.2.0 Cross Site Scripting

Exploit Title: ManageEngine AssetExplorer 6.2.0 - Stored XSS Date: 2018-09-26 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.manageengine.com/ Hardware Link : https://www.manageengine.com/products/asset-explorer/ Software : ZOHO Corp ManageEngine AssetExplorer 6.2.0 Product Version:...