CVE-2018-15168

CVE-2018-15168 involves a SQL injection in Zoho ManageEngine Applications Manager 13 prior to build 13820, exploitable via the resids parameter in a GET request to /editDisplaynames.do?method=editDisplaynames. The issue is documented in multiple sources (NVD entry and CVE lists) with the affected...

PT-2018-12917

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Applications Manager version 13 before build 13820 Description A SQL Injection issue exists via the resids parameter in a "/editDisplaynames.do?method=editDisplaynames" GET request. Recommendations For Zoho ManageEngine...