ManageEngine OpManager APMIntegBusinessViewHandler OPM_BVNAME SQL Injection

This vulnerability is due to insufficient validation of the OPMBVNAME parameter when processing requests sent to APMIntegBusinessViewHandler servlet. A remote, unauthenticated attacker could exploit this vulnerability by sending a web request with a malicious SQL query to the target server...

CVE-2014-7868: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in ZOHO ManageEngine OpManager 11.3 and 11.4, IT360 10.3 and 10.4, and Social IT Plus 11.0 allow remote attackers or remote authenticated users to execute arbitrary SQL commands via the 1 OPMBVNAME parameter in a Delete operation to the APMBVHandler servlet ...