ManageEngine ADManager Plus 5.2 Multiple XSS Vulnerabilities

🗓️ 07 Feb 2012 00:00:00Reported by Gjoko KrsticType

zeroscience🔗 www.zeroscience.mk👁 48 Views

ManageEngine ADManager Plus 5.2 XSS Vulnerabilities in 'domainName' and 'operation' parameter

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2012-1049	7 Feb 201200:00	–	circl
CVE	CVE-2012-1049	13 Feb 201219:00	–	cve
Cvelist	CVE-2012-1049	13 Feb 201219:00	–	cvelist
EUVD	EUVD-2012-1087	7 Oct 202500:30	–	euvd
NVD	CVE-2012-1049	13 Feb 201219:55	–	nvd
OpenVAS	ManageEngine ADManager Plus Multiple XSS Vulnerabilities	8 Feb 201200:00	–	openvas
OpenVAS	Zoho ManageEngine ADManager Plus Multiple Cross Site Scripting Vulnerabilities	8 Feb 201200:00	–	openvas
Prion	Cross site scripting	13 Feb 201219:55	–	prion

<html><body><p>ManageEngine ADManager Plus 5.2 Multiple XSS Vulnerabilities


Vendor: Zoho Corporation Pvt. Ltd.
Product web page: http://www.manageengine.com
Affected version: 5.2

Summary: ADManager Plus is a simple, easy-to-use Windows
Active Directory Management and Reporting Solution that
helps AD Administrators and Help Desk Technicians with
their day-to-day activities.

Desc: ADManager Plus suffers from multiple XSS vulnerabilities
when parsing user input to the 'domainName' parameter in the
'/jsp/AddDC.jsp' script via GET method and 'operation' parameter
in the '/DomainConfig.do' script via POST method. Attackers can
exploit these weaknesses to execute arbitrary HTML and script
code in a user's browser session.

Tested on: Microsoft Windows XP Professional SP3 (EN)
           Apache-Coyote/1.1


Vulnerability discovered by Gjoko 'LiquidWorm' Krstic
                            @zeroscience


Advisory ID: ZSL-2012-5070
Advisory URL: http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5070.php


06.02.2012

---

#1

 - GET http://localhost:8080/jsp/AddDC.jsp?domainName="&gt;<script>alert('zsl')</script> HTTP/1.1


#2

 - POST http://localhost:8080/DomainConfig.do?methodToCall=save HTTP/1.1

   - DOMAIN_NAME=test&amp;DOMAIN_CONTROLLER_NAME=testsrv&amp;save=Add&amp;operation="&gt;<script>alert('zsl')</script>&amp;reset=
</p></body></html>

07 Feb 2012 00:00Current

6.1Medium risk

Vulners AI Score6.1

CVSS 24.3

EPSS0.06492