6460 matches found
CVE-2024-21775: Improper Neutralization of Special Elements used in an SQL Command
Zoho ManageEngine Exchange Reporter Plus versions 5714 and below are vulnerable to the Authenticated SQL injection in report exporting feature...
ZOHO ManageEngine Exchange Reporter Security Vulnerability
ZOHO ManageEngine Exchange Reporter is a hybrid Exchange and Skype for Business reporting, auditing and monitoring solution from ZOHO USA. A security vulnerability exists in ZOHO ManageEngine Exchange Reporter Plus version 5714 and prior versions. An attacker exploited the vulnerability to perfor...
ManageEngine ADManager Plus Recovery Password Disclosure
Exploit Title: ManageEngine ADManager Plus Build 7183 - Recovery Password Disclosure Exploit Author: Metin Yunus Kandemir Vendor Homepage: https://www.manageengine.com/ Software Link: https://www.manageengine.com/products/ad-manager/ Details:...
ManageEngine ADManager Plus Build < 7183 - Recovery Password Disclosure
Exploit Title: ManageEngine ADManager Plus Build 7183 - Recovery Password Disclosure Exploit Author: Metin Yunus Kandemir Vendor Homepage: https://www.manageengine.com/ Software Link: https://www.manageengine.com/products/ad-manager/ Details:...
The vulnerability of the ManageEngine ADSelfService Plus password reset software lies in the lack of authentication for a critical function, allowing attackers to escalate their privileges.
The vulnerability of the ManageEngine ADSelfService Plus password reset software lies in the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to gain elevated privileges remotely...
ManageEngine ADAudit Plus < Build 7271 Multiple Vulnerabilities
The ManageEngine ADAudit Plus running on the remote host is prior to build 7271. It is, therefore, affected by mutliple SQL injection vulnerabilities: - ManageEngine ADAudit Plus versions 7270 and below are vulnerable to the Authenticated SQL injection in home Graph-Data. CVE-2024-0253 -...
CVE-2024-0269
ManageEngine ADAudit Plus versions 7270 and below are vulnerable to the Authenticated SQL injection in File-Summary DrillDown. This issue has been fixed and released in version 7271...
CVE-2024-0269
ManageEngine ADAudit Plus versions 7270 and below are vulnerable to the Authenticated SQL injection in File-Summary DrillDown. This issue has been fixed and released in version 7271...
CVE-2024-0253
ManageEngine ADAudit Plus versions 7270 and below are vulnerable to the Authenticated SQL injection in home Graph-Data...
Sql injection
ManageEngine ADAudit Plus versions 7270 and below are vulnerable to the Authenticated SQL injection in File-Summary DrillDown. This issue has been fixed and released in version 7271...
Sql injection
ManageEngine ADAudit Plus versions 7270 and below are vulnerable to the Authenticated SQL injection in home Graph-Data...
CVE-2024-0269 SQL Injection
ManageEngine ADAudit Plus versions 7270 and below are vulnerable to the Authenticated SQL injection in File-Summary DrillDown. This issue has been fixed and released in version 7271...
CVE-2024-0269
CVE-2024-0269 affects ManageEngine ADAudit Plus 7270 and earlier, with an authenticated SQL injection in the File-Summary DrillDown feature. The root cause is an SQL injection vulnerability within that drill-down path, allowing an attacker with valid credentials to potentially access or manipulat...
CVE-2024-0269 SQL Injection
ManageEngine ADAudit Plus versions 7270 and below are vulnerable to the Authenticated SQL injection in File-Summary DrillDown. This issue has been fixed and released in version 7271...
CVE-2024-0253
CVE-2024-0253 affects ManageEngine ADAudit Plus versions 7270 and below, due to an Authenticated SQL injection in the home Graph-Data component. The issue is addressed by upgrading to a version above 7270 (e.g., 7271+ as referenced by multiple sources). No exploit details are provided in the supp...
CVE-2024-0253 SQL Injection
ManageEngine ADAudit Plus versions 7270 and below are vulnerable to the Authenticated SQL injection in home Graph-Data...
CVE-2024-0253 SQL Injection
ManageEngine ADAudit Plus versions 7270 and below are vulnerable to the Authenticated SQL injection in home Graph-Data...
CVE-2023-48792
Zoho ManageEngine ADAudit Plus through 7250 is vulnerable to SQL Injection in the report export option...