ZOHO ManageEngine Applications Manager SQL Injection Vulnerability (CNVD-2017-35597)

ZOHO ManageEngine Applications Manager is a set of IT operations management solutions from ZOHO. A SQL injection vulnerability exists in Zoho ManageEngine Applications Manager version 13. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands via the GraphicalView.do...