Added |
CPE Configuration |
|
Configuration 1
OR
*cpe:2.3:a:manageengine:it360:10.3.3:build_10330:*:*:*:*:*:* (and previous)
*cpe:2.3:a:manageengine:it360:10.3.3:build_10330:*:*:managed_service_providers:*:*:* (and previous)
Configuration 2
OR
*cpe:2.3:a:manageengine:desktop_central:9.0:build_90043:*:*:*:*:*:* (and previous)
*cpe:2.3:a:manageengine:desktop_central:9.0:build_90043:*:*:managed_service_providers:*:*:* (and previous)
Configuration 3
OR
*cpe:2.3:a:manageengine:password_manager_pro:7.0:build_7003:*:*:*:*:*:* (and previous)
*cpe:2.3:a:manageengine:password_manager_pro:7.0:build_7003:*:*:managed_service_providers:*:*:* (and previous)
|
Added |
CVSS V2 |
|
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
|
Added |
CWE |
|
CWE-89
|
Changed |
Reference Type |
http://seclists.org/fulldisclosure/2014/Aug/55 No Types Assigned
|
http://seclists.org/fulldisclosure/2014/Aug/55 Exploit
|
Changed |
Reference Type |
https://raw.githubusercontent.com/pedrib/PoC/master/ManageEngine/me_dc_pmp_it360_sqli.txt No Types Assigned
|
https://raw.githubusercontent.com/pedrib/PoC/master/ManageEngine/me_dc_pmp_it360_sqli.txt Exploit
|
Changed |
Reference Type |
https://raw.githubusercontent.com/pedrib/PoC/master/msf_modules/manageengine_dc_pmp_sqli.rb No Types Assigned
|
https://raw.githubusercontent.com/pedrib/PoC/master/msf_modules/manageengine_dc_pmp_sqli.rb Exploit
|