CVE-2011-5105

EUVD-2011-5005
Multiple cross-site scripting (XSS) vulnerabilities in EmployeeSearch.cc in ZOHO ManageEngine ADSelfService Plus 4.5 Build 4521 allow remote attackers to inject arbitrary web script or HTML via the (1) searchType and (2) searchString parameters, a different vulnerability than CVE-2010-3274.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 76%
Affected Products (NVD)
VendorProductVersion
zohocorpmanageengine_adselfservice_plus
4.5
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://jameswebb.me/vulns/vrpth-2011-001.txt
http://www.securityfocus.com/archive/1/520562/100/0/threaded
http://www.securityfocus.com/bid/50717
https://exchange.xforce.ibmcloud.com/vulnerabilities/71395
http://jameswebb.me/vulns/vrpth-2011-001.txt
http://www.securityfocus.com/archive/1/520562/100/0/threaded
http://www.securityfocus.com/bid/50717
https://exchange.xforce.ibmcloud.com/vulnerabilities/71395