2 matches found
CVE-2017-16846: Improper Neutralization of Special Elements used in an SQL Command
Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /manageApplications.do?method=AddSubGroup haid parameter...
9.8CVSS8.2AI score0.16644EPSS
SaveExploits0References2
CVE-2017-16542: Improper Neutralization of Special Elements used in an SQL Command
Zoho ManageEngine Applications Manager 13 before build 13500 allows Post-authentication SQL injection via the name parameter in a manageApplications.do?method=insert request...
8.8CVSS7.8AI score0.05487EPSS
SaveExploits4References2
20