CVE-2015-5061 | BDVDB-2026-70079 Detail

Description#

Cross-site scripting (XSS) vulnerability in Zoho ManageEngine AssetExplorer 6.1 service pack 6112 and earlier allows remote authenticated users with permissions to add new vendors to inject arbitrary web script or HTML via the organizationName parameter to VendorDef.do.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://packetstormsecurity.com/files/132402/ManageEngine-Asset-Explorer-6.1-Cross-Site-Scripting.html
http://www.securityfocus.com/bid/75411
http://www.vulnerability-lab.com/get_content.php?id=1488

Exploit#

No public exploit known

History#

Version 12015-06-24Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.