112 matches found
ManagEnegine ADManager Plus 6.5.40 - Multiple Vulnerabilities
Exploit for java platform in category web applications 1. ADVISORY INFORMATION ======================================== Title: ManagEnegine ADManager Plus = 6.5.40 Multiple Vulnerabilities Application: ManagEnegine Admanager Remotely Exploitable: Yes Authentication Required: Yes Versions Affected...
ManageEngine ADManager Plus 6.5.40 Cross Site Scripting / SQL Injection
ADVISORY INFORMATION ======================================== Title: ManagEnegine ADManager Plus = 6.5.40 Multiple Vulnerabilities Application: ManagEnegine Admanager Remotely Exploitable: Yes Authentication Required: Yes Versions Affected: = 6.5.40 Technology: Java Vendor URL:...
ManagEnegine ADManager Plus 6.5.40 - Multiple Vulnerabilities
ADVISORY INFORMATION ======================================== Title: ManagEnegine ADManager Plus = 6.5.40 Multiple Vulnerabilities Application: ManagEnegine Admanager Remotely Exploitable: Yes Authentication Required: Yes Versions Affected: = 6.5.40 Technology: Java Vendor URL:...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in ManageEngine ADManager Plus 5.2 Build 5210 allow remote attackers to inject arbitrary web script or HTML via the 1 domainName parameter to jsp/AddDC.jsp or 2 operation parameter to DomainConfig.do...
Zoho ManageEngine ADManager Plus Multiple Cross Site Scripting Vulnerabilities
This host is running Zoho ManageEngine ADManager Plus and is prone to multiple cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbmanageengineadmanagerplusmultxssvuln.nasl 5950 2017-04-13 09:02:06Z teissa $ Zoho ManageEngine ADManager Plus Multiple Cross Site Scripting...
ManageEngine ADManager Plus Multiple XSS Vulnerabilities
ManageEngine ADManager Plus is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...
ManageEngine ADManager Plus 5.2 Build 5210 - 'Operation' Cross-Site Scripting
source: https://www.securityfocus.com/bid/51893/info ManageEngine ADManager Plus is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...
ManageEngine ADManager Plus 5.2 Build 5210 - Operation Cross-Site Scripting
ManageEngine ADManager Plus 5.2 Build 5210 - Operation Cross-Site Scripting source: https://www.securityfocus.com/bid/51893/info ManageEngine ADManager Plus is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverag...
ManageEngine ADManager Plus 5.2 Build 5210 - 'domainName' Cross-Site Scripting
source: https://www.securityfocus.com/bid/51893/info ManageEngine ADManager Plus is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...
CVE-2010-5050
Cross-site scripting XSS vulnerability in jsp/admin/tools/remoteshare.jsp in ManageEngine ADManager Plus 4.4.0 allows remote attackers to inject arbitrary web script or HTML via the computerName parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from...
Cross site scripting
Cross-site scripting XSS vulnerability in jsp/admin/tools/remoteshare.jsp in ManageEngine ADManager Plus 4.4.0 allows remote attackers to inject arbitrary web script or HTML via the computerName parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from...
CVE-2010-5050
Affected software: ManageEngine ADManager Plus 4.4.0. Vulnerability location: JSP page jsp/admin/tools/remote_share.jsp, vulnerability in the input handling of the computerName parameter. Root cause / impact: Cross-site scripting (XSS) that allows an attacker to inject arbitrary web script or HTM...