CVE

Id
49422  
CVE No.
CVE-2011-1510  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in SolutionSearch.do in ManageEngine ServiceDesk Plus (SDP) before 8012 allows remote attackers to inject arbitrary web script or HTML via the searchText parameter.  
Phase
Assigned (20110323)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
536451 49422 CVE-2011-1510 BUGTRAQ:20110914 CORE-2011-0506 - Multiples Vulnerabilities in ManageEngine ServiceDesk Plus  View
536452 49422 CVE-2011-1510 URL:http://www.securityfocus.com/archive/1/archive/1/519652/100/0/threaded  View
536453 49422 CVE-2011-1510 MISC:http://www.coresecurity.com/content/multiples-vulnerabilities-manageengine-sdp  View
536454 49422 CVE-2011-1510 BID:49636  View
536455 49422 CVE-2011-1510 URL:http://www.securityfocus.com/bid/49636  View
536456 49422 CVE-2011-1510 SREASON:8385  View
536457 49422 CVE-2011-1510 URL:http://securityreason.com/securityalert/8385  View
536458 49422 CVE-2011-1510 XF:servicedesk-solutionsearch-xss(69840)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
34172 JVNDB-2011-004414 HP OpenView Storage Data Protector の inet サービスにおけるサービス運用妨害 (DoS) の脆弱性 HP OpenView Storage Data Protector の inet サービスにはサービス運用妨害 (デーモン終了) 状態となる脆弱性が存在します。 CVE-2011-1515 49422 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004414.html  View