ZOHO ManageEngine EventLog Analyzer Securely Bypasses SQL Injection Vulnerability

ZOHO ManageEngine EventLog Analyzer is a set of system, event log analysis software. The ZOHO ManageEngine EventLog Analyzer event/runQuery.do file fails to adequately filter the 'query' parameter, allowing remote attackers to exploit the vulnerability by submitting a specially crafted SQL query ...

CVE-2007-1882

qcbin/servlet/tdservlet/TDAPIGeneralWebTreatment in HP Mercury Quality Center 9.0 build 9.1.0.4352 allows remote authenticated users to execute arbitrary SQL commands via the RunQuery method...

HP Mercury Quality Center 9.0 build 9.1.0.4352 SQL Execution Exploit

Exploit for multiple platform in category remote exploits ==================================================================== HP Mercury Quality Center 9.0 build 9.1.0.4352 SQL Execution Exploit ==================================================================== !/usr/bin/perl HP Mercury Qualit...