Sql injection

2014-12-0515:59:00

PRIOn knowledge base

www.prio-n.com

8.6 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.0%

JSON

SQL injection vulnerability in the MetadataServlet servlet in ManageEngine Password Manager Pro (PMP) and Password Manager Pro Managed Service Providers (MSP) edition 5 through 7 build 7003, IT360 and IT360 Managed Service Providers (MSP) edition before 10.3.3 build 10330, and possibly other ManageEngine products, allows remote attackers or remote authenticated users to execute arbitrary SQL commands via the sv parameter to MetadataServlet.dat.

CPENameOperatorVersion
manageengine_it360le10.3.3
manageengine_it360le10.3.3
manageengine_password_manager_proeq5.0
manageengine_password_manager_proeq5.1
manageengine_password_manager_proeq5.2
manageengine_password_manager_proeq5.3
manageengine_password_manager_proeq5.4
manageengine_password_manager_proeq6.0
manageengine_password_manager_proeq6.0 build6002
manageengine_password_manager_proeq6.1 build6104

Name	Operator	Version
manageengine_it360	le	10.3.3
manageengine_it360	le	10.3.3
manageengine_password_manager_pro	eq	5.0
manageengine_password_manager_pro	eq	5.1
manageengine_password_manager_pro	eq	5.2
manageengine_password_manager_pro	eq	5.3
manageengine_password_manager_pro	eq	5.4
manageengine_password_manager_pro	eq	6.0
manageengine_password_manager_pro	eq	6.0 build6002
manageengine_password_manager_pro	eq	6.1 build6104