CVE-2018-9163 | BDVDB-2026-98615 Detail

Description#

A stored Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Recovery Manager Plus before 5.3 (Build 5350) allows remote authenticated users (with Add New Technician permissions) to inject arbitrary web script or HTML via the loginName field to technicianAction.do.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.manageengine.com/ad-recovery-manager/release-notes.html#5350
https://gurelahmet.com/cve-2018-9163-zoho-manageengine-recovery-manager-plus-5-3-build-5330-stored-cross-site-scripting-xss-vulnerability/
http://www.securityfocus.com/bid/103773
https://www.exploit-db.com/exploits/44666/

Exploit#

https://www.exploit-db.com/exploits/44666/

History#

Version 12018-04-02Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.