Unscored CVE-2017-16847 EUVD-2017-8021GHSA-842f-3h87-m5qf

Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /showresource.do resourceid parameter in a showPl…

Published Nov 16, 2017 · Updated Aug 5, 2024 · Assigned by mitre

Description

Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /showresource.do resourceid parameter in a showPlasmaView action.

References

http://code610.blogspot.com/2017/11/more-sql-injections-in-manageengine.html
https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2017-16847.html