Unscored CVE-2018-15168 EUVD-2018-7048GHSA-4jgm-xpqf-vqrj

A SQL Injection vulnerability exists in the Zoho ManageEngine Applications Manager 13 before build 13820 via the resids parameter in a /edi…

Published Aug 8, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Description

A SQL Injection vulnerability exists in the Zoho ManageEngine Applications Manager 13 before build 13820 via the resids parameter in a /editDisplaynames.do?method=editDisplaynames GET request.

References

https://www.manageengine.com/products/applications_manager/issues.html
https://github.com/x-f1v3/ForCve/issues/2
https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2018-15168.html