2 matches found
CVE-2017-16543
Zoho ManageEngine Applications Manager 13 before build 13500 allows SQL injection via GraphicalView.do, as demonstrated by a crafted viewProps yCanvas field or viewid parameter...
9.8CVSS5.8AI score0.05558EPSS
SaveExploits4References3
CVE-2017-16543: Improper Neutralization of Special Elements used in an SQL Command
Zoho ManageEngine Applications Manager 13 before build 13500 allows SQL injection via GraphicalView.do, as demonstrated by a crafted viewProps yCanvas field or viewid parameter...
9.8CVSS8.2AI score0.05558EPSS
SaveExploits4References2
20