CVE-2015-1479

Description

References

• packetstormsecurity.com/files/130079/ManageEngine-ServiceDesk-9.0-SQL-Injection.html · Exploit
• exploit-db.com/exploits/35890 · Exploit
• manageengine.com/products/service-desk/readme-9.0.html · Vendor Advisory
• rewterz.com/vulnerabilities/manageengine-servicedesk-sql-injection-vulnerability · Exploit
• securityfocus.com/bid/72299 · Exploit

servicedesk plus 的其他漏洞

• CVE-2019-10008高危 8.8Zoho ManageEngine ServiceDesk 9.3 allows session hijacking and privilege escalation because an established guest session is automatically co…
• CVE-2016-4890中危 5.3ZOHO ManageEngine ServiceDesk Plus before 9.2 uses an insecure method for generating cookies, which makes it easier for attackers to obtain …
• CVE-2016-4889高危 8.8ZOHO ManageEngine ServiceDesk Plus before 9.0 allows remote authenticated guest users to have unspecified impact by leveraging failure to re…
• CVE-2016-4888中危 5.4Cross-site scripting (XSS) vulnerability in ZOHO ManageEngine ServiceDesk Plus before 9.2 allows remote attackers to inject arbitrary web sc…