Unrated severityNVD Advisory· Published Aug 23, 2012· Updated Apr 29, 2026

CVE-2011-5105

Description

Multiple cross-site scripting (XSS) vulnerabilities in EmployeeSearch.cc in ZOHO ManageEngine ADSelfService Plus 4.5 Build 4521 allow remote attackers to inject arbitrary web script or HTML via the (1) searchType and (2) searchString parameters, a different vulnerability than CVE-2010-3274.

Affected products

Zohocorp/Manageengine Adselfservice Plus
cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:4.5:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

jameswebb.me/vulns/vrpth-2011-001.txtnvdExploit
www.securityfocus.com/bid/50717nvdExploit
www.securityfocus.com/archive/1/520562/100/0/threadednvd
exchange.xforce.ibmcloud.com/vulnerabilities/71395nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000