CVE-2009-4387 in Password Manager Pro6.1信息

摘要

由 MITRE

The cross-site scripting (XSS) protection mechanism in ShowInContentAreaAction.do in ManageEngine Password Manager Pro (PMP) before 6.1 Build 6104 uses case-sensitive checks for malicious inputs, which allows remote attackers to inject arbitrary web script or HTML via the searchtext parameter and other unspecified inputs.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2009-12-22

披露

2009-12-22

管理

已接受

条目

VDB-51259

CPE

准备好

CWE

CWE-79 (已确认)

CVSS

4.3 (VulDB)

EPSS

0.01328

KEV

否

活动

非常低

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2009-4387
NVD	https://nvd.nist.gov/vuln/detail/CVE-2009-4387
CVE Details	https://www.cvedetails.com/cve/CVE-2009-4387/

◂ 上一步一览下一步 ▸

Might our Artificial Intelligence support you?

Check our Alexa App!