CVE-2017-16849: Improper Neutralization of Special Elements used in an SQL Command

Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /MyPage.do?method=viewDashBoard forpage parameter...

PT-2017-14594

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Applications Manager version 13 before build 13530 Description The issue allows SQL injection via the "MyPage.do?method=viewDashBoard" endpoint for the forpage parameter. Recommendations For Zoho ManageEngine Applications...