XSS in Zohocorp Manageengine_supportcenter_plus
CVE-2015-0866
Multiple cross-site scripting (XSS) vulnerabilities in Zoho ManageEngine SupportCenter Plus 7.9 before hotfix 7941 allow remote attackers to inject arbitrary web script or HTML via the (1) fromCustomer, (2) username, or (3) password parame…
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.004 (63.4th percentile) — read the EPSS interpretation.
Affected products
- Zohocorp Manageengine_supportcenter_plus
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
- 72349 (Exploit, vdb-entry, x_refsource_BID)
- 20150128 Two XSS Vulnerabilities in SupportCenter Plus (mailing-list, x_refsource_BUGTRAQ)