CVE-2011-5105

Zohocorp Manageengine Adselfservice Plus - XSS

Title source: rule
STIX 2.1

Description

Multiple cross-site scripting (XSS) vulnerabilities in EmployeeSearch.cc in ZOHO ManageEngine ADSelfService Plus 4.5 Build 4521 allow remote attackers to inject arbitrary web script or HTML via the (1) searchType and (2) searchString parameters, a different vulnerability than CVE-2010-3274.

Exploits (1)

exploitdb WORKING POC VERIFIED
by James webb · textwebappsphp
https://www.exploit-db.com/exploits/36316

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/520562/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/71395
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/50717

Scores

EPSS 0.0094
EPSS Percentile 76.5%

Details

CWE
CWE-79
Status published
Products (1)
zohocorp/manageengine_adselfservice_plus 4.5
Published Aug 23, 2012
Tracked Since Feb 18, 2026