CVE-2020-27995

SQL Injection in Zoho ManageEngine Applications Manager 14 before 14560 allows an attacker to execute commands on the server via the MyPage.do templateresid parameter...

Sql injection

SQL Injection in Zoho ManageEngine Applications Manager 14 before 14560 allows an attacker to execute commands on the server via the MyPage.do templateresid parameter...

CVE-2020-27995

CVE-2020-27995 affects Zoho ManageEngine Applications Manager 14.x prior to 14560. The vulnerability is an SQL injection in the MyPage.do action that allows an attacker to execute commands on the server via the template_resid parameter, caused by improper validation of user-supplied input. Impact...

CVE-2020-27995: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in Zoho ManageEngine Applications Manager 14 before 14560 allows an attacker to execute commands on the server via the MyPage.do templateresid parameter...