215 matches found
ZOHO ManageEngine Exchange Reporter Plus 安全漏洞
ZOHO ManageEngine Exchange Reporter Plus is a Web-based Exchange Server reporting software from ZOHO, Inc. A security vulnerability exists in ZOHO ManageEngine Exchange Reporter Plus 5718 and prior versions that stems from vulnerability to authenticated SQL injection in the reporting module...
PT-2024-39647 · Zoho · Zoho Manageengine Exchange Reporter Plus
Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine Exchange Reporter Plus versions 5718 and prior Description: The issue concerns an authenticated SQL Injection in the reports module. Recommendations: For versions 5718 and prior, update to a version later than 5718 to...
CVE-2024-6204
Zohocorp ManageEngine Exchange Reporter Plus versions before 5715 are vulnerable to SQL Injection in the reports module...
CVE-2024-6204
Zohocorp ManageEngine Exchange Reporter Plus versions before 5715 are vulnerable to SQL Injection in the reports module...
CVE-2024-6204 SQL injection
Zohocorp ManageEngine Exchange Reporter Plus versions before 5715 are vulnerable to SQL Injection in the reports module...
CVE-2024-6204
Product affected: Zohocorp ManageEngine Exchange Reporter Plus. Vulnerability: SQL Injection in the reports module. Affected versions: before 5715. Root cause / details: SQL injection vulnerability in the reports module (no further technical specifics provided in the cited documents). Impact (as ...
CVE-2024-6204 SQL injection
Zohocorp ManageEngine Exchange Reporter Plus versions before 5715 are vulnerable to SQL Injection in the reports module...
PT-2024-37449 · Zohocorp · Zoho Manageengine Exchange Reporter Plus
Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine Exchange Reporter Plus versions before 5715 Description: The issue is related to SQL Injection in the reports module of the software. This allows for potential exploitation. No information is provided about the estimated...
ZOHO ManageEngine Exchange Reporter Plus SQL注入漏洞
ZOHO ManageEngine Exchange Reporter Plus is a Web-based Exchange Server reporting software from ZOHO, Inc. A SQL injection vulnerability exists in ZOHO ManageEngine Exchange Reporter Plus versions prior to 5715, which stems from susceptibility to SQL injection attacks...
The vulnerability of the Reports module of the monitoring, analysis, and reporting software ManageEngine Exchange Reporter Plus allows a hacker to execute arbitrary SQL queries against the database.
The vulnerability of the Reports module in the ManageEngine Exchange Reporter Plus software for monitoring, analysis, and report generation is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL...
The vulnerability of the Zohocorp ManageEngine Exchange Reporter Plus software, which is related to the lack of measures taken to protect the SQL query structure, allows attackers to execute arbitrary SQL queries against the database.
The vulnerability of the monitoring, analysis, and reporting software Zohocorp ManageEngine Exchange Reporter Plus is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries against the database...
CVE-2024-38871
Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the reports module...
CVE-2024-38872
Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the monitoring module...
CVE-2024-38872
Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the monitoring module...
CVE-2024-38872
CVE-2024-38872 concerns Zohocorp ManageEngine Exchange Reporter Plus, with affected versions 5717 and below. The issue arises in the monitoring module, where the SQL query structure is not properly protected, enabling an authenticated SQL injection vulnerability. Exploitation would require valid ...
CVE-2024-38872 SQL Injection
Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the monitoring module...
CVE-2024-38872 SQL Injection
Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the monitoring module...
CVE-2024-38871
CVE-2024-38871 affects ManageEngine Exchange Reporter Plus; versions 5717 and below are vulnerable to an authenticated SQL injection in the reports module. The root cause is a lack of protection against SQL query structure attacks in that component, enabling an attacker with valid credentials to ...