cve,link,title,description,vendor,products,score,severity,epss,cisa,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score
CVE-2024-5546,https://securityvulnerability.io/vulnerability/CVE-2024-5546,Zohocorp Password Manager Pro vulnerable to SQL Injection via Global Search Option,"An authenticated SQL injection vulnerability has been identified in ManageEngine Password Manager Pro and PAM360, affecting versions prior to 12431 and 7001, respectively. This vulnerability allows attackers to exploit the global search functionality, potentially accessing and manipulating sensitive data hosted in the affected systems. Timely updates and patches are critical to mitigate the risks associated with this vulnerability.",Manageengine,"Password Manager Pro,Pam360",8.8,HIGH,0.003860000055283308,false,false,false,false,,false,false,2024-08-28T08:44:09.433Z,0
CVE-2014-9372,https://securityvulnerability.io/vulnerability/CVE-2014-9372,,Directory traversal vulnerability in the UploadAccountActivities servlet in ManageEngine Password Manager Pro (PMP) before 7103 allows remote attackers to delete arbitrary files via a .. (dot dot) in a filename.,Manageengine,Password Manager Pro,,,0.022220000624656677,false,false,false,false,,false,false,2014-12-16T18:00:00.000Z,0
CVE-2014-8499,https://securityvulnerability.io/vulnerability/CVE-2014-8499,,Multiple SQL injection vulnerabilities in ManageEngine Password Manager Pro (PMP) and Password Manager Pro Managed Service Providers (MSP) edition before 7.1 build 7105 allow remote authenticated users to execute arbitrary SQL commands via the SEARCH_ALL parameter to (1) SQLAdvancedALSearchResult.cc or (2) AdvancedSearchResult.cc.,Manageengine,Password Manager Pro,,,0.025599999353289604,false,false,false,false,,false,false,2014-11-17T16:00:00.000Z,0
CVE-2009-4387,https://securityvulnerability.io/vulnerability/CVE-2009-4387,,"The cross-site scripting (XSS) protection mechanism in ShowInContentAreaAction.do in ManageEngine Password Manager Pro (PMP) before 6.1 Build 6104 uses case-sensitive checks for malicious inputs, which allows remote attackers to inject arbitrary web script or HTML via the searchtext parameter and other unspecified inputs.",Manageengine,"Password Manager Pro,Password Manager Pro6.1",,,0.004149999935179949,false,false,false,false,,false,false,2009-12-22T23:30:00.000Z,0