ManageEngine EventLog Analyzer 6.1 - Multiple Cross-Site Scripting Vulnerabilities

ManageEngine EventLog Analyzer 6.1 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/45334/info ManageEngine EventLog Analyzer is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker m...

ManageEngine EventLog Analyzer 6.1 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/45334/info ManageEngine EventLog Analyzer is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

ManageEngine ADAudit Plus Detection

ADAudit Plus, a web-based Active Directory change auditing software, was detected on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid46788; scriptversion"1.7"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"ManageEngine ADAudit Plus Detection";...

CVE-2010-2049

Cross-site scripting XSS vulnerability in jsp/audit/reports/ExportReport.jsp in ManageEngine ADAudit Plus 4.0.0 build 4043 allows remote attackers to inject arbitrary web script or HTML via the reportList parameter. NOTE: the provenance of this information is unknown; the details are obtained...

Cross site scripting

Cross-site scripting XSS vulnerability in jsp/audit/reports/ExportReport.jsp in ManageEngine ADAudit Plus 4.0.0 build 4043 allows remote attackers to inject arbitrary web script or HTML via the reportList parameter. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2010-2049

CVE-2010-2049 concerns a cross-site scripting (XSS) vulnerability in ManageEngine ADAudit Plus. The issue affects the JavaServer Page at jsp/audit/reports/ExportReport.jsp, where user-controlled input passed via the reportList parameter can be reflected into the HTML/JS context. Versions/builds s...

Sql injection

SQL injection vulnerability in Login.do in ManageEngine OpUtils 5.0 allows remote attackers to execute arbitrary SQL commands via the isHttpPort parameter...

CVE-2010-1044

SQL injection vulnerability in Login.do in ManageEngine OpUtils 5.0 allows remote attackers to execute arbitrary SQL commands via the isHttpPort parameter...

CVE-2010-1044

CVE-2010-1044 describes a SQL injection vulnerability in the ManageEngine OpUtils 5.0 login path. Specifically, the vulnerable point is the Login.do handling of the isHttpPort parameter, which can be manipulated by an attacker to alter or append SQL commands. The result is remote execution of arb...

CVE-2010-1044

SQL injection vulnerability in Login.do in ManageEngine OpUtils 5.0 allows remote attackers to execute arbitrary SQL commands via the isHttpPort parameter...

ManageEngine ServiceDesk Plus 7.6 - woID SQL Injection

ManageEngine ServiceDesk Plus 7.6 - woID SQL Injection Advisory Name: SQL injection in Manage Engine Service Desk Plus 7.6 Vulnerability Class: SQL injection Release Date: 03-18-2010 Affected Applications: Confirmed in version 7.6. Other versions may also be affected. Affected Platforms: Multiple...

ManageEngine ServiceDesk Plus 7.6 - woID SQL Injection

Advisory Name: SQL injection in Manage Engine Service Desk Plus 7.6 Vulnerability Class: SQL injection Release Date: 03-18-2010 Affected Applications: Confirmed in version 7.6. Other versions may also be affected. Affected Platforms: Multiple Local / Remote: Remote Severity: High – CVSS: 9...

ManageEngine OpUtils 5 Login.DO SQL Injection

================================================================================ ManageEngine OpUtils 5 "Login.DO" SQL Injection Vulnerability ================================================================================ Date-3/2/10 code by Asheesh kumar Mani Tripathi AKS IT Services Credit by...

ManageEngine OpUtils 5 "Login.DO" SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= ManageEngine OpUtils 5 "Login.DO" SQL Injection Vulnerability ============================================================= Date-3/2/10 code by Asheesh kumar Mani Tripathi AKS I...

ManageEngine OpUtils 5 Login.DO Cross Site Scripting

================================================================================ ManageEngine OpUtils 5 "Login.DO" Multiple Cross Site Scripting Vulnerabilities ================================================================================ code by Asheesh kumar Mani Tripathi AKS IT Services...

ManageEngine OpUtils 5 - Login.DO SQL Injection

ManageEngine OpUtils 5 - Login.DO SQL Injection ================================================================================ ManageEngine OpUtils 5 "Login.DO" SQL Injection Vulnerability ================================================================================ Date-3/2/10 code by Ashee...

ManageEngine OpUtils 5 - 'Login.DO' SQL Injection

================================================================================ ManageEngine OpUtils 5 "Login.DO" SQL Injection Vulnerability ================================================================================ Date-3/2/10 code by Asheesh kumar Mani Tripathi AKS IT Services Credit by...

CVE-2009-4387

The cross-site scripting XSS protection mechanism in ShowInContentAreaAction.do in ManageEngine Password Manager Pro PMP before 6.1 Build 6104 uses case-sensitive checks for malicious inputs, which allows remote attackers to inject arbitrary web script or HTML via the searchtext parameter and oth...

Cross site scripting

The cross-site scripting XSS protection mechanism in ShowInContentAreaAction.do in ManageEngine Password Manager Pro PMP before 6.1 Build 6104 uses case-sensitive checks for malicious inputs, which allows remote attackers to inject arbitrary web script or HTML via the searchtext parameter and oth...

CVE-2009-4387

The cross-site scripting XSS protection mechanism in ShowInContentAreaAction.do in ManageEngine Password Manager Pro PMP before 6.1 Build 6104 uses case-sensitive checks for malicious inputs, which allows remote attackers to inject arbitrary web script or HTML via the searchtext parameter and oth...