3 matches found
Sql injection
Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /showresource.do resourceid parameter in a getResourceProfiles action...
7.5CVSS9.7AI score0.16644EPSS
SaveExploits0References2Affected Software1
CVE-2017-16850
Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /showresource.do resourceid parameter in a getResourceProfiles action...
9.9AI score0.16644EPSS
SaveExploits0References2
CVE-2017-16850: Improper Neutralization of Special Elements used in an SQL Command
Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /showresource.do resourceid parameter in a getResourceProfiles action...
9.8CVSS8.2AI score0.16644EPSS
SaveExploits0References2
20