CVE-2019-7424

XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/index.jsp" file in the view GET parameter or any of these POST parameters: autorefTime, section, snapshot, viewOpt, viewAll, view, or groupSelName. The latter is related to...

CVE-2019-7424

CVE-2019-7424 is an XSS vulnerability in Zoho ManageEngine NetFlow Analyzer Professional v7.0.0.2 in the Administration zone (/netflow/jspui/index.jsp). The view parameter or any of the POST parameters (autorefTime, section, snapshot, viewOpt, viewAll, view, groupSelName) can be used to inject sc...

CVE-2019-7424

creationtimestamp| type| source ---|---|--- 2019-02-11 15:32:22+00:00| seen| MISP/5c619517-8030-4437-87bb-18cb0a021402...

Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2 XSS

!-- Exploit Title: Cross Site Scripting in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 Administration zone Date: 31-01-2019 Exploit Author: Rafael Pedrero Vendor Homepage: https://www.manageengine.com/products/netflow/?doc Software Link:...