CVEvulnerability
CVE-2010-3274
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-02-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in EmployeeSearch.cc in the Employee Search Engine in ZOHO ManageEngine ADSelfService Plus before 4.5 Build 4500 allow remote attackers to inject arbitrary web script or HTML via the searchString parameter in a (1) showList or (2) Search action.
Affected configurations
• zohocorp manageengine adselfservice plus (<= 4.4)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/43241 Vendor Advisory
- http://securityreason.com/securityalert/8089 securityreason.com
- http://www.coresecurity.com/content/zoho-manageengine-vulnerabilities Exploit
- http://www.osvdb.org/70871 Exploit
- http://www.osvdb.org/70872 Exploit
- http://www.securityfocus.com/archive/1/516396/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/46331 Exploit
- http://www.vupen.com/english/advisories/2011/0392 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65349 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/43241 Vendor Advisory
- http://securityreason.com/securityalert/8089 securityreason.com
- http://www.coresecurity.com/content/zoho-manageengine-vulnerabilities Exploit
- http://www.osvdb.org/70871 Exploit
- http://www.osvdb.org/70872 Exploit
- http://www.securityfocus.com/archive/1/516396/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/46331 Exploit
- http://www.vupen.com/english/advisories/2011/0392 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65349 exchange.xforce.ibmcloud.com