CVEvulnerability
CVE-2011-5105
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-08-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in EmployeeSearch.cc in ZOHO ManageEngine ADSelfService Plus 4.5 Build 4521 allow remote attackers to inject arbitrary web script or HTML via the (1) searchType and (2) searchString parameters, a different vulnerability than CVE-2010-3274.
Affected configurations
• zohocorp manageengine adselfservice plus 4.5
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://jameswebb.me/vulns/vrpth-2011-001.txt Exploit
- http://www.securityfocus.com/archive/1/520562/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/50717 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71395 exchange.xforce.ibmcloud.com
- http://jameswebb.me/vulns/vrpth-2011-001.txt Exploit
- http://www.securityfocus.com/archive/1/520562/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/50717 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71395 exchange.xforce.ibmcloud.com