CVE-2011-1510

Affected product: ManageEngine ServiceDesk Plus (SDP) 8.0.x, specifically builds up to 8011. Vulnerability: cross-site scripting (XSS) in SolutionSearch.do via the searchText parameter. Root cause: insufficient sanitization of input leading to arbitrary script/HTML execution in the authenticated ...

CVE-2011-1509

Affected product : ManageEngine ServiceDesk Plus (SDP) versions up to 8.x, including SDP 8012 and earlier. Vulnerability details : CVE-2011-1509 is an authentication weakness where the encryptPassword function in Login.js uses a Caesar cipher with no salt or secret, storing passwords locally in c...

CVE-2011-1510: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in SolutionSearch.do in ManageEngine ServiceDesk Plus SDP before 8012 allows remote attackers to inject arbitrary web script or HTML via the searchText parameter...

CORE-2011-0506 - Multiples Vulnerabilities in ManageEngine ServiceDesk Plus

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Multiples Vulnerabilities in ManageEngine ServiceDesk Plus 1. Advisory Information Title: Multiples Vulnerabilities in ManageEngine ServiceDesk Plus Advisory ID: CORE-2011-0506 Advisory URL:...

PT-2011-3176

Name of the Vulnerable Software and Affected Versions ManageEngine ServiceDesk Plus SDP versions 8012 and earlier Description The issue concerns the encryption of passwords in cookies. It is related to the encryptPassword function in Login.js, which uses a Caesar cipher for encryption. This makes...

CVE-2011-1509: Undefined Security Weakness

The encryptPassword function in Login.js in ManageEngine ServiceDesk Plus SDP 8012 and earlier uses a Caesar cipher for encryption of passwords in cookies, which makes it easier for remote attackers to obtain sensitive information by sniffing the network...

PT-2011-3177

Name of the Vulnerable Software and Affected Versions ManageEngine ServiceDesk Plus SDP versions prior to 8012 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the searchText parameter in the "SolutionSearch.do" endpoint...

ManageEngine ServiceDesk Plus 'searchText' XSS Vulnerability

This host is running ManageEngine ServiceDesk Plus and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbmanageengineservicedeskplusxssvuln.nasl 7019 2017-08-29 11:51:27Z teissa $ ManageEngine ServiceDesk Plus 'searchText' XSS Vulnerability Authors: Antu Sanadi...

ManageEngine ServiceDesk Plus Authentication Bypass Vulnerability

This host is running ManageEngine ServiceDesk Plus and is prone to authentication bypass vulnerability. OpenVAS Vulnerability Test $Id: gbmanageengineservicedeskplusauthbypassvuln.nasl 7019 2017-08-29 11:51:27Z teissa $ ManageEngine ServiceDesk Plus Authentication Bypass Vulnerability Authors: An...

ManageEngine ServiceDesk Plus <= 8.0 Build 8013 Authentication Bypass Vulnerability

ManageEngine ServiceDesk Plus is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Core Security Technologies Advisory 2011.0506

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Multiples Vulnerabilities in ManageEngine ServiceDesk Plus 1. Advisory Information Title: Multiples Vulnerabilities in ManageEngine ServiceDesk Plus Advisory ID: CORE-2011-0506 Advisory URL:...

Multiples Vulnerabilities in ManageEngine ServiceDesk Plus

Core Security - Corelabs Advisory 1. Advisory Information Title: Multiples Vulnerabilities in ManageEngine ServiceDesk Plus Advisory ID: CORE-2011-0506 Advisory URL: http://www.coresecurity.com/content/multiples-vulnerabilities-manageengine-sdp Date published: 2011-09-14 Date of last update:...

ManageEngine ServiceDesk Plus Multiple Stored XSS Vulnerabilities

This host is running ManageEngine ServiceDesk Plus and is prone to multiple stored cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: secpodmanageengineservicedeskplusmultxssvuln.nasl 7006 2017-08-25 11:51:20Z teissa $ ManageEngine ServiceDesk Plus Multiple Stored XSS...

ManageEngine ServiceDesk Plus < 8.0 Build 8015 Multiple Stored XSS Vulnerabilities

ManageEngine ServiceDesk Plus is prone to multiple stored cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

ManageEngine ServiceDesk Plus 8.0 Cross Site Scripting

ManageEngine ServiceDesk Plus 8.0 Multiple Stored XSS Vulnerabilities Vendor: Zoho Corporation Pvt. Ltd. Product web page: http://www.manageengine.com Affected version: 8.0.0 Build 8013 Enterprise Summary: ServiceDesk Plus integrates your help desk requests and assets to help you manage your IT...

ManageEngine ServiceDesk Plus 8.0 - Multiple Persistent Cross-Site Scripting Vulnerabilities

ManageEngine ServiceDesk Plus 8.0 Multiple Stored XSS Vulnerabilities Vendor: Zoho Corporation Pvt. Ltd. Product web page: http://www.manageengine.com Affected version: 8.0.0 Build 8013 Enterprise Summary: ServiceDesk Plus integrates your help desk requests and assets to help you manage your IT...

ManageEngine ServiceDesk Plus 8.0 Multiple Stored XSS Vulnerabilities

Exploit for jsp platform in category web applications ManageEngine ServiceDesk Plus 8.0 Multiple Stored XSS Vulnerabilities Vendor: Zoho Corporation Pvt. Ltd. Product web page: http://www.manageengine.com Affected version: 8.0.0 Build 8013 Enterprise Summary: ServiceDesk Plus integrates your help...

ManageEngine ServiceDesk Plus 8.0 - Multiple Persistent Cross-Site Scripting Vulnerabilities

ManageEngine ServiceDesk Plus 8.0 - Multiple Persistent Cross-Site Scripting Vulnerabilities ManageEngine ServiceDesk Plus 8.0 Multiple Stored XSS Vulnerabilities Vendor: Zoho Corporation Pvt. Ltd. Product web page: http://www.manageengine.com Affected version: 8.0.0 Build 8013 Enterprise Summary...

ManageEngine ServiceDesk Plus 8.0 Multiple Stored XSS Vulnerabilities

Summary ServiceDesk Plus integrates your help desk requests and assets to help you manage your IT effectively. It helps you implement ITIL best practices and troubleshoot IT service requests faster. ServiceDesk Plus is a highly customizable, easy-to-implement help desk software. Description The...

ManageEngine ServiceDesk Plus Multiple XSS Vulnerabilities

This host is running ManageEngine ServiceDesk Plus and is prone to multiple cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbmanageengineservicedeskplusmultxssvuln.nasl 7024 2017-08-30 11:51:43Z teissa $ ManageEngine ServiceDesk Plus Multiple XSS Vulnerabilities Authors: An...