zohocorp manageengine applications manager 13.6 vulnerabilities and exploits

(subscribe to this query)

A vulnerability in the showReports module of Zoho ManageEngine Applications Manager before build 14550 allows authenticated malicious users to execute a SQL injection via a crafted request.

Zohocorp Manageengine Applications Manager 14.0 Zohocorp Manageengine Applications Manager 14.5 Zohocorp Manageengine Applications Manager 13.7 Zohocorp Manageengine Applications Manager 13.9 Zohocorp Manageengine Applications Manager 13.8 Zohocorp Manageengine Applications Manager 13.6 Zohocorp Manageengine Applications Manager 13.5 Zohocorp Manageengine Applications Manager 12.8 Zohocorp Manageengine Applications Manager 12.9 Zohocorp Manageengine Applications Manager 13.0 Zohocorp Manageengine Applications Manager 13.1 Zohocorp Manageengine Applications Manager 13.2 Zohocorp Manageengine Applications Manager 13.3 Zohocorp Manageengine Applications Manager 13.4 Zohocorp Manageengine Applications Manager 11.5 Zohocorp Manageengine Applications Manager 11.6 Zohocorp Manageengine Applications Manager 11.7 Zohocorp Manageengine Applications Manager 11.8 Zohocorp Manageengine Applications Manager 11.9 Zohocorp Manageengine Applications Manager 12.0 Zohocorp Manageengine Applications Manager 12.1 Zohocorp Manageengine Applications Manager 12.2

A remote code execution issue exists in Zoho ManageEngine Applications Manager prior to 13.6 (build 13640). The publicly accessible testCredential.do endpoint takes multiple user inputs and validates supplied credentials by accessing a specified system. This endpoint calls severa...

Zohocorp Manageengine Applications Manager

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook