PT-2015-6785 · Zoho · Zoho Manageengine Supportcenter Plus

Alain Homewood · Published 2015-06-30 · Updated 2015-07-01 · CVE-2015-5150

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine SupportCenter Plus version 7.90

Description The issue allows remote authenticated users to inject arbitrary web script or HTML. This can be achieved via the query parameter in the "run query editor query" module to "CustomReportHandler.do", the compAcct parameter to "jsp/ResetADPwd.jsp", or the redirectTo parameter to "jsp/CacheScreenWidth.jsp".

Recommendations For Zoho ManageEngine SupportCenter Plus version 7.90, consider disabling access to the "run query editor query" module, restricting the use of the compAcct parameter in "jsp/ResetADPwd.jsp", and limiting access to the redirectTo parameter in "jsp/CacheScreenWidth.jsp" until a patch is available.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2015-5150

Affected Products

Zoho Manageengine Supportcenter Plus

References · 4

• 🔥 https://exploit-db.com/exploits/37322 · Exploit
• 🔥 http://vulnerability-lab.com/get_content.php?id=1501 · Exploit
• 🔥 http://packetstormsecurity.com/files/132376/ManageEngine-SupportCenter-Plus-7.90-XSS-Traversal-Password-Disclosure.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-5150 · Security Note