ManageEngine ServiceDesk Plus CVE-2016-4888 HTML Injection Vulnerability

Bugtraq ID: 93214
Class: Input Validation Error
CVE: CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
CVE-2016-4888
Remote: Yes
Local: No
Published: Sep 29 2016 12:00AM
Updated: Oct 03 2016 06:01AM
Credit: Akihito Mukai and Tomoshige Hasegawa.
Vulnerable: ManageEngine ServiceDesk Plus 7.6
ManageEngine ServiceDesk Plus 7.0 Build 7011
ManageEngine ServiceDesk Plus 7.0
ManageEngine ServiceDesk Plus 9.0 Build 9031
ManageEngine ServiceDesk Plus 9.0
ManageEngine ServiceDesk Plus 8.2
ManageEngine ServiceDesk Plus 8.0.0.12
ManageEngine ServiceDesk Plus 8.0 hotfix 8015
ManageEngine ServiceDesk Plus 8.0
ManageEngine ServiceDesk Plus 7.6.0 Build7605
ManageEngine ServiceDesk Plus 7.6
Not Vulnerable: ManageEngine ServiceDesk Plus 9.2


 

Privacy Statement
Copyright 2010, SecurityFocus