medium4.3Public exploit code
CVE-2012-1049
Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine ADManager Plus 5.2 Build 5210 allow remote attackers to inject arbitrary web script or HTML…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ManageEngine ADManager Plus 5.2 Build 5210 - 'domainName' Cross-Site Scripting2012-02-07 · webapps · java · Verified
- ManageEngine ADManager Plus 5.2 Build 5210 - 'Operation' Cross-Site Scripting2012-02-07 · webapps · java · Verified
Impact
Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine ADManager Plus 5.2 Build 5210 allow remote attackers to inject arbitrary web script or HTML via the (1) domainName parameter to jsp/AddDC.jsp or (2) operation parameter to DomainConfig.do.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Manageengine | Admanager Plus | Version 5.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.org/files/109528
- http://secunia.com/advisories/47887
- http://www.securityfocus.com/bid/51893
- http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5070.php
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73039
- http://packetstormsecurity.org/files/109528
- http://secunia.com/advisories/47887
- http://www.securityfocus.com/bid/51893
- http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5070.php
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73039