CVE-2017-16850

Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /showresource.do resourceid parameter in a getResourceProfiles action...

CVE-2017-16849

Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /MyPage.do?method=viewDashBoard forpage parameter...

CVE-2017-16846

Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /manageApplications.do?method=AddSubGroup haid parameter...

CVE-2017-16848

Zoho ManageEngine Applications Manager 13 allows SQL injection via the /manageConfMons.do groupname parameter...

CVE-2017-16851

Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /MyPage.do widgetid parameter...

CVE-2017-16846

Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /manageApplications.do?method=AddSubGroup haid parameter...

CVE-2017-16850

Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /showresource.do resourceid parameter in a getResourceProfiles action...

Sql injection

Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /showresource.do resourceid parameter in a getResourceProfiles action...

Sql injection

Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /MyPage.do widgetid parameter...

Sql injection

Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /manageApplications.do?method=AddSubGroup haid parameter...

Sql injection

Zoho ManageEngine Applications Manager 13 allows SQL injection via the /manageConfMons.do groupname parameter...

Sql injection

Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /showresource.do resourceid parameter in a showPlasmaView action...

Sql injection

Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /MyPage.do?method=viewDashBoard forpage parameter...

CVE-2017-16848

Zoho ManageEngine Applications Manager 13 allows SQL injection via the /manageConfMons.do groupname parameter...

CVE-2017-16849

Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /MyPage.do?method=viewDashBoard forpage parameter...

CVE-2017-16847

CVE-2017-16847 affects Zoho ManageEngine Applications Manager 13 prior to build 13530. The vulnerability is an SQL injection in the /showresource.do resourceid parameter of the showPlasmaView action, allowing an attacker to inject SQL statements. The available connected documents confirm the vuln...

CVE-2017-16850

Zoho ManageEngine Applications Manager 13 before build 13530 is affected by a SQL injection in the getResourceProfiles action via the /showresource.do resourceid parameter. This vulnerability is confirmed across multiple sources (NVD CVE-2017-16850 and related advisories), with CVSS v3.0 base sco...

CVE-2017-16846

CVE-2017-16846 affects Zoho ManageEngine Applications Manager 13 prior to build 13530, where SQL injection is possible through the /manageApplications.do?method=AddSubGroup haid parameter. The vulnerability is cited in NVD and other feeds with CVSS v3.0 score 9.8 (CRITICAL) and CVSS v2 score 7.5 ...

CVE-2017-16848

Zoho ManageEngine Applications Manager 13 allows SQL injection via the /manageConfMons.do groupname parameter...

CVE-2017-16851

CVE-2017-16851 affects Zoho ManageEngine Applications Manager 13 prior to build 13530. The vulnerability is a SQL injection exploited via the /MyPage.do widgetid parameter, enabling unauthenticated network-accessible exploitation with partial data confidentiality/integrity/availability impact (pe...