4 matches found
CVE-2020-35765
doFilter in com.adventnet.appmanager.filter.UriCollector in Zoho ManageEngine Applications Manager through 14930 allows an authenticated SQL Injection via the resourceid parameter to showresource.do...
Sql injection
doFilter in com.adventnet.appmanager.filter.UriCollector in Zoho ManageEngine Applications Manager through 14930 allows an authenticated SQL Injection via the resourceid parameter to showresource.do...
PT-2021-11855
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Applications Manager versions through 14930 Description: The issue allows an authenticated SQL Injection via the resourceid parameter to "showresource.do". This affects the doFilter function in...
CVE-2020-35765: Improper Neutralization of Special Elements used in an SQL Command
doFilter in com.adventnet.appmanager.filter.UriCollector in Zoho ManageEngine Applications Manager through 14930 allows an authenticated SQL Injection via the resourceid parameter to showresource.do...