CVE-2017-16849

Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /MyPage.do?method=viewDashBoard forpage parameter...

CVE-2017-16849

CVE-2017-16849 affects Zoho ManageEngine Applications Manager 13 prior to build 13530. The vulnerability is a SQL injection in the MyPage.do?method=viewDashBoard forpage parameter, enabling unauthorized arbitrary SQL execution. The NVD entry cites a CVSS3 base score of 9.8 (CRITICAL) with network...

CVE-2017-16849: Improper Neutralization of Special Elements used in an SQL Command

Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /MyPage.do?method=viewDashBoard forpage parameter...

PT-2017-14594

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Applications Manager version 13 before build 13530 Description The issue allows SQL injection via the "MyPage.do?method=viewDashBoard" endpoint for the forpage parameter. Recommendations For Zoho ManageEngine Applications...