Unscored severity · published Aug 23, 2012
CVE-2011-5105
Multiple cross-site scripting (XSS) vulnerabilities in EmployeeSearch.cc in ZOHO ManageEngine ADSelfService Plus 4.5 Build 4521 allow remote attackers to inject arbitrary web…
–
CVSS
6%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in EmployeeSearch.cc in ZOHO ManageEngine ADSelfService Plus 4.5 Build 4521 allow remote attackers to inject arbitrary web script or HTML via the (1) searchType and (2) searchString parameters, a different vulnerability than CVE-2010-3274.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.0% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MA
ManageEngine ADSelfService Plus · Zoho
4.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-5105
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-5105
Exploit
http://jameswebb.me/vulns/vrpth-2011-001.txt
www.securityfocus.com
http://www.securityfocus.com/archive/1/520562/100/0/threaded
Exploit
http://www.securityfocus.com/bid/50717
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/71395
More from ManageEngine ADSelfService Plus
9.8
CVE-2022-47966
Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability
9.8
CVE-2022-35405
Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability
9.8
CVE-2021-40539
Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability
9.8
CVE-2020-10189
Zoho ManageEngine Desktop Central File Upload Vulnerability
6.8
CVE-2022-28810
Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability