5 matches found
CVE-2019-7423
XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/editProfile.jsp" file in the userName parameter...
PT-2019-18597
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Netflow Analyzer Professional version 7.0.0.2 Description A security issue exists in the Administration zone of the software, specifically in the "/netflow/jspui/editProfile.jsp" file, where the userName parameter is vulnerab...
CVE-2019-7423: Improper Neutralization of Input During Web Page Generation
XSS exists in Zoho ManageEngine Netflow Analyzer Professional v7.0.0.2 in the Administration zone "/netflow/jspui/editProfile.jsp" file in the userName parameter...
CVE-2011-3645
Newgen OmniDocs allows remote attackers to bypass intended access restrictions via 1 a modified FolderRights parameter to doccab/doclist.jsp, which leads to arbitrary permission changes; or 2 a modified UserIndex parameter to doccab/userprofile/editprofile.jsp, which selects the settings page of ...
CVE-2011-3645: Undefined Security Weakness
Newgen OmniDocs allows remote attackers to bypass intended access restrictions via 1 a modified FolderRights parameter to doccab/doclist.jsp, which leads to arbitrary permission changes; or 2 a modified UserIndex parameter to doccab/userprofile/editprofile.jsp, which selects the settings page of ...