Lucene search
K

7 matches found

CNVD
CNVD
added 2021/02/08 12:0 a.m.21 views

ZOHO ManageEngine Applications Manager SQL Injection Vulnerability (CNVD-2022-09274)

ZOHO ManageEngine Applications Manager is an IT operations management solution from ZOHO, Inc. Zoho ManageEngine Applications Manager through 14930 is vulnerable to SQL injection, which can be exploited to perform an authenticated SQL injection into showresource.do via the resourceid parameter...

8.8CVSS3.5AI score0.01258EPSS
Exploits1References1
OSV
OSV
added 2021/02/05 2:15 p.m.1 views

CVE-2020-35765

doFilter in com.adventnet.appmanager.filter.UriCollector in Zoho ManageEngine Applications Manager through 14930 allows an authenticated SQL Injection via the resourceid parameter to showresource.do...

8.8CVSS7.4AI score0.01258EPSS
Exploits1References4
NVD
NVD
added 2021/02/05 2:15 p.m.10 views

CVE-2020-35765

doFilter in com.adventnet.appmanager.filter.UriCollector in Zoho ManageEngine Applications Manager through 14930 allows an authenticated SQL Injection via the resourceid parameter to showresource.do...

8.8CVSS0.01258EPSS
Exploits1References4
Prion
Prion
added 2021/02/05 2:15 p.m.9 views

Sql injection

doFilter in com.adventnet.appmanager.filter.UriCollector in Zoho ManageEngine Applications Manager through 14930 allows an authenticated SQL Injection via the resourceid parameter to showresource.do...

6.5CVSS8.9AI score0.01258EPSS
Exploits1References4Affected Software1
CNNVD
CNNVD
added 2021/02/05 12:0 a.m.4 views

ZOHO ManageEngine Applications Manager SQL注入漏洞

ZOHO ManageEngine Applications Manager is an IT operations management solution from ZOHO, Inc. Zoho ManageEngine Applications Manager through 14930 is vulnerable to SQL injection, which can be exploited to perform an authenticated SQL injection into showresource.do via the resourceid parameter...

8.8CVSS7.3AI score0.01258EPSS
Exploits1References5
NVD
NVD
added 2017/11/16 5:29 p.m.8 views

CVE-2017-16847

Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /showresource.do resourceid parameter in a showPlasmaView action...

9.8CVSS9.8AI score0.12312EPSS
Exploits0References2
Cvelist
Cvelist
added 2017/11/16 5:0 p.m.12 views

CVE-2017-16850

Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /showresource.do resourceid parameter in a getResourceProfiles action...

9.9AI score0.12312EPSS
Exploits0References2
Rows per page
Query Builder