← Database

CVE-2009-4387

MEDIUM CVSS: 4.3 Published: 2009-12-22 Modified: 2026-06-16

Description

The cross-site scripting (XSS) protection mechanism in ShowInContentAreaAction.do in ManageEngine Password Manager Pro (PMP) before 6.1 Build 6104 uses case-sensitive checks for malicious inputs, which allows remote attackers to inject arbitrary web script or HTML via the searchtext parameter and other unspecified inputs.

Affected Platforms

Manageengine Password Manager Pro6.1Manageengine Password Manager Pro

Weakness Type

CWE-79

References