CVE-2019-17602

An issue was discovered in Zoho ManageEngine OpManager before 12.4 build 124089. The OPMDeviceDetailsServlet servlet is prone to SQL injection. Depending on the configuration, this vulnerability could be exploited unauthenticated or authenticated...

Zoho CRM Lead Magnet Plugin - Authenticated Cross Site Scripting (XSS)

The version affected was version 1.6.9.1 The plugin was removed from the WordPress plugin directory on October 15th 2019...

CVE-2019-17112

An issue was discovered in Zoho ManageEngine DataSecurity Plus before 5.0.1 5012. An exposed service allows a basic user "Operator" access level to access the configuration file of the mail server except for the password...

CVE-2019-17112

An issue was discovered in Zoho ManageEngine DataSecurity Plus before 5.0.1 5012. An exposed service allows a basic user "Operator" access level to access the configuration file of the mail server except for the password...

Design/Logic Flaw

An issue was discovered in Zoho ManageEngine DataSecurity Plus before 5.0.1 5012. An exposed service allows a basic user "Operator" access level to access the configuration file of the mail server except for the password...

CVE-2019-17112

Zoho ManageEngine DataSecurity Plus before 5.0.1 5012 exposes a service that allows a basic user (Operator access) to access the mail server’s configuration file (excluding passwords). Root cause: an exposed service leaking configuration data. Impact: partial confidentiality of mail server config...

CVE-2019-17112

An issue was discovered in Zoho ManageEngine DataSecurity Plus before 5.0.1 5012. An exposed service allows a basic user "Operator" access level to access the configuration file of the mail server except for the password...

WordPress zoho-salesiq plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. zoho-salesiq is one of the plug-ins used to track the behavior of website users. A cross-site scripting vulnerability exists in the...

WordPress zoho-salesiq plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. zoho-salesiq is one of the plug-ins used to track the behavior of website users. A cross-site request forgery vulnerability exists in...

CVE-2019-15644

The zoho-salesiq plugin before 1.0.9 for WordPress has stored XSS...

CVE-2019-15644

The zoho-salesiq plugin before 1.0.9 for WordPress has stored XSS...

CVE-2019-15645

The zoho-salesiq plugin before 1.0.9 for WordPress has CSRF...

CVE-2019-15645

The zoho-salesiq plugin before 1.0.9 for WordPress has CSRF...

Cross site scripting

The zoho-salesiq plugin before 1.0.9 for WordPress has stored XSS...

Cross site request forgery (csrf)

The zoho-salesiq plugin before 1.0.9 for WordPress has CSRF...

CVE-2019-15645

The zoho-salesiq plugin before 1.0.9 for WordPress has CSRF...

CVE-2019-15645

CVE-2019-15645 affects the Zoho SalesIQ WordPress plugin prior to version 1.0.9, with a CSRF vulnerability in the plugin. CVSS metrics indicate a high-severity impact (CVSS v3 base score 8.8, HIGH) across network attack vector, requiring user interaction, potentially affecting confidentiality, in...

CVE-2019-15644

The provided connected records confirm a concrete vulnerability: the WordPress plugin Zoho SalesIQ before version 1.0.9 contains a stored XSS vulnerability. The CVE description, CNVD/Red Hat entries, and CVE lists (and WPVulnDB/CNVD variants) consistently state a WordPress plugin flaw that allows...

CVE-2019-15644

The zoho-salesiq plugin before 1.0.9 for WordPress has stored XSS...

ZOHO ManageEngine ServiceDesk Plus User Enumeration Vulnerability

ZOHO ManageEngine ServiceDesk Plus is a set of ITIL-based IT service management software ITSM from ZOHO. The software integrates incident management, problem management, asset management, IT project management, procurement and contract management and other functional modules. The ZOHO ManageEngin...