CVEvulnerability
CVE-2015-5061
3.5 LOW
Official page ↗
- Status
- Modified
- Published
- 2015-06-24
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in Zoho ManageEngine AssetExplorer 6.1 service pack 6112 and earlier allows remote authenticated users with permissions to add new vendors to inject arbitrary web script or HTML via the organizationName parameter to VendorDef.do.
Affected configurations
• zohocorp manageengine assetexplorer 6.1
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://www.securityfocus.com/bid/75411 www.securityfocus.com
- http://www.vulnerability-lab.com/get_content.php?id=1488 Exploit
- https://packetstormsecurity.com/files/132402/ManageEngine-Asset-Explorer-6.1-Cross-Site-Scripting.html Exploit
- http://www.securityfocus.com/bid/75411 www.securityfocus.com
- http://www.vulnerability-lab.com/get_content.php?id=1488 Exploit
- https://packetstormsecurity.com/files/132402/ManageEngine-Asset-Explorer-6.1-Cross-Site-Scripting.html Exploit