Skip to content

CVE-2017-16849 Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /MyPage.do?method=viewDashBoard forpage parameter.

CriticalCVSS 9.8 EPSS 16.6%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /MyPage.do?method=viewDashBoard forpage parameter.

Affected products

ProductAffected versionsFixed in
Zohocorp ManageEngine Applications Manager = 13.0 No fix listed

References