CVE-2012-1049

EPSS 1.6%

Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine ADManager Plus 5.2 Build 5210 allow remote attackers to inject arbitrary web script or HTML via the (1) domainName parameter to jsp/AddDC.jsp or (2) operation parameter to DomainConfig.do.

Affected products

n/a · n/a

public PoCs found — 3

cve_referencepacketstormsecurity.org/files/109528unverified exploitdbwww.exploit-db.com/exploits/36667unverified exploitdbwww.exploit-db.com/exploits/36666unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://packetstormsecurity.org/files/109528 http://secunia.com/advisories/47887 https://exchange.xforce.ibmcloud.com/vulnerabilities/73039 http://www.securityfocus.com/bid/51893 http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5070.php