CVE-2015-2169 – ManageEngine Asset Explorer 6.1 - Persistent Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2015-2169

24 Jun 2015 — Cross-site scripting (XSS) vulnerability in Zoho ManageEngine AssetExplorer 6.1 service pack 6112 allows remote attackers to inject arbitrary web script or HTML via a Publisher registry entry, which is not properly handled when the machine is scanned. Vulnerabilidad de XSS en Zoho ManageEngine AssetExplorer 6.1 service pack 6112 permite a atacantes remotos inyectar secuencias de comandos web arbitrarios o HTML a través de una entrada del registro Publisher, la cual no se maneja correctamente cuando la máqui... • https://packetstorm.news/files/id/132433 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •