idappcom

Main Menu

What's new

What's New

Latest Traffic IQ Professional update contains 150 of the latest application exploits, associated data and high quality security rules.

Online Shop

Safe and Secure

Purchase our software and protection services today.
Shop now...

Cyber Protection

Managed Service

Cyber Protection for the home, home office, traveller and small office. Not just a device, a managed service from leading experts.
More info...

Threat Level

Threat Level

High (6.8/10)

IQID:2535 HTTP OpManager (ping.do) Cross-Site Scripting S

IQID: 2535 - July 2007

A successful remote code execution attack against AdventNet ManageEngine OpManager via the (1) name parameter in (a) ping.do and (b) traceRoute.do in map/; the (2) reportName, (3) displayName, and (4) selectedNode parameters to (c) reports/ReportViewAction.do; the (5) operation parameter to (d) admin/ServiceConfiguration.do; and the (6) selectedNode and (7) selectedTab parameters to (e) admin/DeviceAssociation.do.

A Full Description is available for this threat, please sign in for access to Full Description.

Attack Data

Attack Data is available for this threat, please sign in for access to Attack Data.

CVSS Information

CVSS Information is available for this threat, please sign in for access to CVSS Information.

Date

Date Information is available for this threat, please sign in for access to Date Information.

External Resources

External resources are available for this threat, please sign in for access to external resources.

Permalink

Link directly to this page.

http://www.idappcom.com/db/?2535