CVE-2018-12996

A reflected Cross-site scripting XSS vulnerability in Zoho ManageEngine Applications Manager before 13 Build 13800 allows remote attackers to inject arbitrary web script or HTML via the parameter 'method' to GraphicalView.do...

CVE-2018-12996

A reflected Cross-site scripting XSS vulnerability in Zoho ManageEngine Applications Manager before 13 Build 13800 allows remote attackers to inject arbitrary web script or HTML via the parameter 'method' to GraphicalView.do...

CVE-2017-16543

Affected software: Zoho ManageEngine Applications Manager 13 (before build 13500). Vulnerability: SQL injection via GraphicalView.do, exploitable through crafted viewProps.yCanvas field or viewid parameter. Root cause (as described): unsafely constructed SQL in the application handling GraphicalV...

CVE-2017-16543

Zoho ManageEngine Applications Manager 13 before build 13500 allows SQL injection via GraphicalView.do, as demonstrated by a crafted viewProps yCanvas field or viewid parameter...