CVE-2015-5459

SQL injection vulnerability in the AdvanceSearch.class in AdventNetPassTrix.jar in ManageEngine Password Manager Pro PMP before 8.1 Build 8101 allows remote authenticated users to execute arbitrary SQL commands via the ANDOR parameter, as demonstrated by a request to...

Sql injection

SQL injection vulnerability in the AdvanceSearch.class in AdventNetPassTrix.jar in ManageEngine Password Manager Pro PMP before 8.1 Build 8101 allows remote authenticated users to execute arbitrary SQL commands via the ANDOR parameter, as demonstrated by a request to...

CVE-2015-5459

Summary: CVE-2015-5459 affects ManageEngine Password Manager Pro (PMP) prior to 8.1 Build 8101. The vulnerability resides in the AdvanceSearch.class within AdventNetPassTrix.jar and is a SQL injection via the ANDOR parameter, enabling remote authenticated users to execute arbitrary SQL commands (...

ManageEngine Password Manager Pro 8.1 SQL Injection Vulnerability

ManageEngine Password Manager Pro version 8.1 suffers from a remote SQL injection vulnerability. Title: ManageEngine Password Manager Pro SQL 8.1 Injection vulnerability Author: Blazej Adamczyk br0x Download site: https://www.manageengine.com/products/passwordmanagerpro/download.html Version: 8.1...