NVD

Id
51510  
Name
CVE-2009-4387  
Description
The cross-site scripting (XSS) protection mechanism in ShowInContentAreaAction.do in ManageEngine Password Manager Pro (PMP) before 6.1 Build 6104 uses case-sensitive checks for malicious inputs, which allows remote attackers to inject arbitrary web script or HTML via the searchtext parameter and other unspecified inputs.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-12-22  
Modified Date
2009-12-23  
Seq
2009-4387  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
261262 51510 CVE-2009-4387 http://forums.manageengine.com/#Topic/49000003740390  View
261263 51510 CVE-2009-4387 http://www.manageengine.com/products/passwordmanagerpro/release-notes.html  View
261264 51510 CVE-2009-4387 http://www.scip.ch/?vuldb.4063  View
261265 51510 CVE-2009-4387 http://www.scip.ch/publikationen/advisories/scip_advisory-4063_manageengine_pmp_script_injection.txt  View
261266 51510 CVE-2009-4387 37336  View
261267 51510 CVE-2009-4387 ADV-2009-3540  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
44220 JVNDB-2009-005227 ManageEngine PMP の ShowInContentAreaAction.do における Web スクリプトを挿入される脆弱性 ManageEngine Password Manager Pro (PMP) の ShowInContentAreaAction.do のクロスサイトスクリプティング (XSS) 保護メカニズムは、悪意のある入力に対して大文字と小文字を区別するチェックを使用するため、任意の Web スクリプトまたは HTML を挿入される脆弱性が存在します。 CVE-2009-4387 41818 CVE-2009-4387 51510 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005227.html 2009-12-22 2012-09-25 View