CVE-2017-16847

CVE-2017-16847

Zoho ManageEngine Applications Manager 13 allows SQL injection via the /showresource.do resourceid parameter in a showPlasmaView action.

Source: CVE-2017-16847