CVE-2017-16851

CVE-2017-16851

Zoho ManageEngine Applications Manager 13 allows SQL injection via the /MyPage.do widgetid parameter.

Source: CVE-2017-16851