Sql injection

2017-11-0517:29:00

PRIOn knowledge base

www.prio-n.com

9 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.0%

JSON

Zoho ManageEngine Applications Manager 13 before build 13500 allows Post-authentication SQL injection via the name parameter in a manageApplications.do?method=insert request.

CPENameOperatorVersion
manageengine_applications_managereq13.0

CPE	Name	Operator	Version
	manageengine_applications_manager	eq	13.0

References

code610.blogspot.com/2017/11/sql-injection-in-manageengine.html

www.exploit-db.com/exploits/43129/

www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2017-16542.html