Show filters
506 Total Results
Displaying 471-480 of 506
Sort by:
Attacker Value
Unknown
CVE-2015-2959
Disclosure Date: June 09, 2015 (last updated October 05, 2023)
Zoho NetFlow Analyzer build 10250 and earlier does not check for administrative authorization, which allows remote attackers to obtain sensitive information, modify passwords, or remove accounts by leveraging the guest role.
0
Attacker Value
Unknown
CVE-2015-2960
Disclosure Date: June 09, 2015 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in Zoho NetFlow Analyzer build 10250 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
0
Attacker Value
Unknown
CVE-2015-1026
Disclosure Date: March 11, 2015 (last updated October 05, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in ZOHO ManageEngine ADManager Plus before 6.2 Build 6270 allow remote attackers to inject arbitrary web script or HTML via the (1) technicianSearchText parameter to the Help Desk Technician page or (2) rolesSearchText parameter to the Help Desk Roles.
0
Attacker Value
Unknown
CVE-2015-1479
Disclosure Date: February 04, 2015 (last updated October 05, 2023)
SQL injection vulnerability in reports/CreateReportTable.jsp in ZOHO ManageEngine ServiceDesk Plus (SDP) before 9.0 build 9031 allows remote authenticated users to execute arbitrary SQL commands via the site parameter.
0
Attacker Value
Unknown
CVE-2014-7864
Disclosure Date: February 04, 2015 (last updated October 05, 2023)
Multiple SQL injection vulnerabilities in the FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine OpManager 8 through 11.5 build 11400 and IT360 10.5 and earlier allow remote attackers and remote authenticated users to execute arbitrary SQL commands via the (1) customerName or (2) serverRole parameter in a standbyUpdateInCentral operation to servlet/com.adventnet.me.opmanager.servlet.FailOverHelperServlet.
0
Attacker Value
Unknown
CVE-2014-9331
Disclosure Date: February 04, 2015 (last updated October 05, 2023)
Cross-site request forgery (CSRF) vulnerability in ZOHO ManageEngine Desktop Central before 9 build 90130 allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via an addUser action to STATE_ID/1417736606982/roleMgmt.do.
0
Attacker Value
Unknown
CVE-2015-0866
Disclosure Date: February 02, 2015 (last updated October 05, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in Zoho ManageEngine SupportCenter Plus 7.9 before hotfix 7941 allow remote attackers to inject arbitrary web script or HTML via the (1) fromCustomer, (2) username, or (3) password parameter to HomePage.do.
0
Attacker Value
Unknown
CVE-2014-100002
Disclosure Date: January 13, 2015 (last updated October 05, 2023)
Directory traversal vulnerability in ManageEngine SupportCenter Plus 7.9 before 7917 allows remote attackers to read arbitrary files via a ..%2f (dot dot encoded slash) in the attach parameter to WorkOrder.do in the file attachment for a new ticket.
0
Attacker Value
Unknown
CVE-2014-3779
Disclosure Date: January 07, 2015 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in ZOHO ManageEngine ADSelfService Plus before 5.2 Build 5202 allows remote attackers to inject arbitrary web script or HTML via the name parameter to GroupSubscription.do.
0
Attacker Value
Unknown
CVE-2014-9371
Disclosure Date: December 16, 2014 (last updated October 05, 2023)
The NativeAppServlet in ManageEngine Desktop Central MSP before 90075 allows remote attackers to execute arbitrary code via a crafted JSON object.
0
