2 matches found
Sql injection
Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /showresource.do resourceid parameter in a showPlasmaView action...
7.5CVSS9.7AI score0.16644EPSS
SaveExploits0References2Affected Software1
CVE-2017-16847: Improper Neutralization of Special Elements used in an SQL Command
Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /showresource.do resourceid parameter in a showPlasmaView action...
9.8CVSS8.2AI score0.16644EPSS
SaveExploits0References2
20