Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in SolutionSearch.do in ManageEngine ServiceDesk Plus (SDP) before 8012 allows remote attackers to inject arbitrary web script or HTML via the searchText parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ManageEngine ServiceDesk Plus SolutionSearch.do跨站脚本攻击漏洞
Vulnerability Description
ZOHO ManageEngine ServiceDesk是美国卓豪(ZOHO)公司的一套基于web的帮助台(HelpDesk)和资产管理软件。 ManageEngine ServiceDesk Plus 8012之前版本的SolutionSearch.do中存在跨站脚本攻击漏洞。远程攻击者可借助searchText参数在受影响站点上下文的用户浏览器中执行任意脚本代码或者生成认证凭证模仿合法用户。
CVSS Information
N/A
Vulnerability Type
N/A