CVE-2015-7387

CVE-2015-7387 affects ZOHO ManageEngine EventLog Analyzer up to 10.6 build 10060 (and earlier). The issue arises in event/runQuery.do where the query parameter is insufficiently filtered, enabling remote attackers to chain an allowed query with a disallowed one to execute arbitrary SQL (e.g., "SE...

CVE-2015-7387

creationtimestamp| type| source ---|---|--- 2015-09-14 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38173 2015-09-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38352 2018-05-29 15:50:33+00:00| seen|...