This host is running Zoho ManageEngine Support Center Plus and is prone to multiple cross site scripting vulnerabilities.

Successful exploitation will allow remote attackers to insert arbitrary HTML and script code, which will be executed in a user's browser session in the context of an affected site. Impact Level: Application

Upgrade to ManageEngine Support Center Plus 7.9 Upgrade Pack 7908 or later For updates refer to http://www.manageengine.com/products/support-center/

The flaws are due to inputs passed to the 'Name' and 'E-mail' parameters via 'sd/Request.sd' script is not properly sanitised before being returned to the user.

ManageEngine Support Center Plus 7.9 Upgrade Pack 7903 and prior

• http://1337day.com/exploits/18057
• http://osvdb.org/81156
• http://www.exploit-db.com/exploits/18745/
• http://xforce.iss.net/xforce/xfdb/74873

---

Updated on 2015-03-25