CVE-2014-8678

Summary: CVE-2014-8678 affects ManageEngine OpUtils (ConfigSaveServlet) prior to build 71024. The vulnerability allows an unauthenticated remote attacker to disclose files by supplying a crafted filename, related to the saveFile handling. Root cause: improper sanitization/validation of the filena...

CVE-2014-8678: Exposure of Sensitive Information to an Unauthorized Actor

The ConfigSaveServlet servlet in ManageEngine OpUtils before build 71024 allows remote attackers to "disclose" files via a crafted filename, related to "saveFile."...

ManageEngine OpUtils ConfigSaveServlet saveFile Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose files on vulnerable installations of ManageEngine OpUtils. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the ConfigSaveServlet servlet. The issue lies in the failure to properly...

PT-2014-8679

Name of the Vulnerable Software and Affected Versions ManageEngine OpUtils versions prior to build 71024 Description The issue allows remote attackers to disclose files via a crafted filename, related to the saveFile functionality in the ConfigSaveServlet servlet. Recommendations For versions pri...

ManageEngine OpUtils 5 "Login.DO" SQL Injection Vulnerability

No description provided by source. ================================================================================ ManageEngine OpUtils 5 Login.DO SQL Injection Vulnerability ================================================================================ Date-3/2/10 code by Asheesh kumar Mani...

ManageEngine OpUtils 6.0 - Stored XSS

No description provided by source. Author: loneferret of Offensive Security Product: ManageEngine OpUtils Version: 6 Vendor Site: http://www.manageengine.com Software Download: http://www.manageengine.com/products/oputils/download.html Software Description:...

ManageEngine OpUtils 6.0 - Persistent Cross-Site Scripting

ManageEngine OpUtils 6.0 - Persistent Cross-Site Scripting Author: loneferret of Offensive Security Product: ManageEngine OpUtils Version: 6 Vendor Site: http://www.manageengine.com Software Download: http://www.manageengine.com/products/oputils/download.html Software Description:...

ManageEngine OpUtils 6.0 - Persistent Cross-Site Scripting

Author: loneferret of Offensive Security Product: ManageEngine OpUtils Version: 6 Vendor Site: http://www.manageengine.com Software Download: http://www.manageengine.com/products/oputils/download.html Software Description: http://www.manageengine.com/products/oputils/oputils.html The toolset can ...

Sql injection

SQL injection vulnerability in Login.do in ManageEngine OpUtils 5.0 allows remote attackers to execute arbitrary SQL commands via the isHttpPort parameter...

CVE-2010-1044

SQL injection vulnerability in Login.do in ManageEngine OpUtils 5.0 allows remote attackers to execute arbitrary SQL commands via the isHttpPort parameter...

CVE-2010-1044

SQL injection vulnerability in Login.do in ManageEngine OpUtils 5.0 allows remote attackers to execute arbitrary SQL commands via the isHttpPort parameter...

CVE-2010-1044

CVE-2010-1044 describes a SQL injection vulnerability in the ManageEngine OpUtils 5.0 login path. Specifically, the vulnerable point is the Login.do handling of the isHttpPort parameter, which can be manipulated by an attacker to alter or append SQL commands. The result is remote execution of arb...

CVE-2010-1044: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Login.do in ManageEngine OpUtils 5.0 allows remote attackers to execute arbitrary SQL commands via the isHttpPort parameter...

ManageEngine OpUtils 5 Login.DO Cross Site Scripting

================================================================================ ManageEngine OpUtils 5 "Login.DO" Multiple Cross Site Scripting Vulnerabilities ================================================================================ code by Asheesh kumar Mani Tripathi AKS IT Services...

ManageEngine OpUtils 5 - Login.DO SQL Injection

ManageEngine OpUtils 5 - Login.DO SQL Injection ================================================================================ ManageEngine OpUtils 5 "Login.DO" SQL Injection Vulnerability ================================================================================ Date-3/2/10 code by Ashee...

ManageEngine OpUtils 5 "Login.DO" SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= ManageEngine OpUtils 5 "Login.DO" SQL Injection Vulnerability ============================================================= Date-3/2/10 code by Asheesh kumar Mani Tripathi AKS I...

ManageEngine OpUtils 5 Login.DO SQL Injection

================================================================================ ManageEngine OpUtils 5 "Login.DO" SQL Injection Vulnerability ================================================================================ Date-3/2/10 code by Asheesh kumar Mani Tripathi AKS IT Services Credit by...

ManageEngine OpUtils 5 - 'Login.DO' SQL Injection

================================================================================ ManageEngine OpUtils 5 "Login.DO" SQL Injection Vulnerability ================================================================================ Date-3/2/10 code by Asheesh kumar Mani Tripathi AKS IT Services Credit by...

Cross site scripting

Cross-site scripting XSS vulnerability in MainLayout.do in ManageEngine OpUtils 5.0 allows remote attackers to inject arbitrary web script or HTML via the hostName parameter, when viewing an SNMP graph. NOTE: the provenance of this information is unknown; the details are obtained solely from thir...

CVE-2008-2797

Cross-site scripting XSS vulnerability in MainLayout.do in ManageEngine OpUtils 5.0 allows remote attackers to inject arbitrary web script or HTML via the hostName parameter, when viewing an SNMP graph. NOTE: the provenance of this information is unknown; the details are obtained solely from thir...