medium4.3Public exploit code
CVE-2015-2169
Cross-site scripting (XSS) vulnerability in Zoho ManageEngine AssetExplorer 6.1 service pack 6112 allows remote attackers to inject arbitrary web script or HTM…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ManageEngine Asset Explorer 6.1 - Persistent Cross-Site Scripting2015-06-26 · webapps · windows
Impact
Cross-site scripting (XSS) vulnerability in Zoho ManageEngine AssetExplorer 6.1 service pack 6112 allows remote attackers to inject arbitrary web script or HTML via a Publisher registry entry, which is not properly handled when the machine is scanned.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zohocorp | Manageengine Assetexplorer | Version 6.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/132433/ManageEngine-Asset-Explorer-6.1-Cross-Site-Scripting.html
- http://seclists.org/fulldisclosure/2015/Jun/74
- http://techtootech.blogspot.in/2015/06/found-xss-vulnerability-in-manage.html
- http://www.securityfocus.com/bid/75389
- https://www.exploit-db.com/exploits/37395/
- http://packetstormsecurity.com/files/132433/ManageEngine-Asset-Explorer-6.1-Cross-Site-Scripting.html
- http://seclists.org/fulldisclosure/2015/Jun/74
- http://techtootech.blogspot.in/2015/06/found-xss-vulnerability-in-manage.html
- http://www.securityfocus.com/bid/75389
- https://www.exploit-db.com/exploits/37395/