X4Lt

Researcher fromVulnerability Research Laboratory
#13552of 60,572
23.6Total CVSS
Vulnerabilities · 4
Medium
2
High
2
PT-2012-2205
2012-10-25
4.3
CVE-2011-5228
Apprain
Apprain Cmf
The issue is related to a cross-site scripting (XSS) vulnerability in the Search module. This allows remote attackers to inject arbitrary web script or HTML via the `ss` parameter in the quickstart/search module.
PT-2012-2206
2012-10-25
7.5
CVE-2011-5229
Apprain
Apprain Cmf
The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the PATH INFO in the quickstart/profile/index.php file within the Forum module.
PT-2012-3051
2012-02-14
4.3
CVE-2012-1062
Zoho
Zoho Manageengine Applications Manager
Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Applications Manager 9.x and 10.x allow remote attackers to inject arbitrary web script or HTML via the (1) period parameter to showHistoryData.do; (2) selectedNetwork, (3) network, or (4) group parameters to showresource.do; (5) header parameter to AlarmView.do; or (6) attName parameter to jsp/PopUp Graph.jsp. NOTE: the Search.do/query vector is already covered by CVE-2008-1566, and the jsp/ThresholdActionConfiguration.jsp redirectto vector is already covered by CVE-2008-0474.
PT-2012-3052
2012-02-14
7.5
CVE-2012-1063
Manageengine
Zoho Manageengine Applications Manager
The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the `viewId` parameter to "fault/AlarmView.do" or the `period` parameter to "showHistoryData.do".