CVE-2012-1049

This exploit demonstrates a cross-site scripting (XSS) vulnerability in ManageEngine ADManager Plus by injecting a script tag into the domainName parameter of the AddDC.jsp endpoint. The PoC uses a simple alert-based payload to confirm the vulnerability.

This exploit demonstrates a cross-site scripting (XSS) vulnerability in ManageEngine ADManager Plus by injecting a malicious script via the 'operation' parameter in a POST request. The vulnerability arises due to insufficient input sanitization, allowing arbitrary JavaScript execution in the context of the affected site.