CVE-2015-5459

Summary: CVE-2015-5459 affects ManageEngine Password Manager Pro (PMP) prior to 8.1 Build 8101. The vulnerability resides in the AdvanceSearch.class within AdventNetPassTrix.jar and is a SQL injection via the ANDOR parameter, enabling remote authenticated users to execute arbitrary SQL commands (...