high7.5
CVE-2012-1063
Multiple SQL injection vulnerabilities in ManageEngine Applications Manager 9.x and 10.x allow remote attackers to execute arbitrary SQL commands via the (1) v…
Impact
Multiple SQL injection vulnerabilities in ManageEngine Applications Manager 9.x and 10.x allow remote attackers to execute arbitrary SQL commands via the (1) viewId parameter to fault/AlarmView.do or (2) period parameter to showHistoryData.do.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Manageengine | Applications Manager | Versions 10.0, 10.1, 10.2, 10.3, 9.1, 9.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.org/files/view/109238/VL-115.txt
- http://www.securityfocus.com/bid/51796
- http://www.vulnerability-lab.com/get_content.php?id=115
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72831
- http://packetstormsecurity.org/files/view/109238/VL-115.txt
- http://www.securityfocus.com/bid/51796
- http://www.vulnerability-lab.com/get_content.php?id=115
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72831