CVE

CVE-2017-16543

CVE-2017-16543

Zoho ManageEngine Applications Manager 13 allows SQL injection via GraphicalView.do, as demonstrated by a crafted viewProps yCanvas field or viewid parameter.

Source: CVE-2017-16543

Exit mobile version