EDB-37322

PoC

ManageEngine SupportCenter Plus 7.90 - Multiple Vulnerabilities

view exploit source exploit_dbtype webappsauthor Vulnerability-Labpublished 2015-06-19catalog exploit_db
01

exploited CVEs (2)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2015-5150USlow3.5Exploit
Multiple cross-site scripting (XSS) vulnerabilities in Zoho ManageEngine SupportCenter Plus 7.90 allow remote authenticated users to inject arbitrary web script or HTML via the (1)…
CVE-2015-5149USmedium5.5Exploit
Directory traversal vulnerability in Zoho ManageEngine SupportCenter Plus 7.90 allows remote authenticated users to write to arbitrary files via a .. (dot dot) in the component par…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan