CVE-2010-3274

Multiple cross-site scripting (XSS) vulnerabilities in EmployeeSearch.cc in the Employee Search Engine in ZOHO ManageEngine ADSelfService Plus before 4.5 Build 4500 allow remote attackers to inject arbitrary web script or HTML via the searchString parameter in a (1) showList or (2) Search action.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

21.00% chance of exploitation in the next 30 days, 97th percentile

Published

2011-02-17

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/35331

References

• CVE Record
• NVD entry

Related

• CVE-2010-3272
• CVE-2010-3275
• CVE-2010-3271
• CVE-2010-3301
• CVE-2010-3267
• CVE-2010-3305