CVE-2011-1510 Cross-site scripting (XSS) vulnerability in SolutionSearch.do in ManageEngine ServiceDesk Plus (SDP) before 8012 allows remote attackers to inject arbitrary web script or HTML via the searchText param...
MediumCVSS 4.3
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in SolutionSearch.do in ManageEngine ServiceDesk Plus (SDP) before 8012 allows remote attackers to inject arbitrary web script or HTML via the searchText parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ManageEngine servicedesk plus | <= 8.0 | No fix listed |
References
- 8385 third-party-advisory
- www.coresecurity.com
- 20110914 CORE-2011-0506 - Multiples Vulnerabilities in ManageEngine ServiceDesk Plus mailing-list
- 49636 vdb-entry
- servicedesk-solutionsearch-xss(69840) vdb-entry