CVE-2017-16847 | BDVDB-2026-93064 Detail

Description#

Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /showresource.do resourceid parameter in a showPlasmaView action.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://code610.blogspot.com/2017/11/more-sql-injections-in-manageengine.html
https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2017-16847.html

Exploit#

No public exploit known

History#

Version 12017-11-16Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.