Description
Cross-site scripting (XSS) vulnerability in SolutionSearch.do in ManageEngine ServiceDesk Plus (SDP) before 8012 allows remote attackers to inject arbitrary web script or HTML via the searchText parameter.
References
- servicedesk-solutionsearch-xss(69840) vdb-entry
- 49636 vdb-entry
- 8385 third-party-advisory
- http://www.coresecurity.com/content/multiples-vulnerabilities-manageengine-sdp
- 20110914 CORE-2011-0506 - Multiples Vulnerabilities in ManageEngine ServiceDesk Plus mailing-list