NetSight
IP …
critical9.8

CVE-2020-27995

SQL Injection in Zoho ManageEngine Applications Manager 14 before 14560 allows an attacker to execute commands on the server via the MyPage.do template_resid p…

Impact

SQL Injection in Zoho ManageEngine Applications Manager 14 before 14560 allows an attacker to execute commands on the server via the MyPage.do template_resid parameter.

Affected products

VendorProductAffected versions
ZohocorpManageengine Applications Manager
Version 14.0

Weakness classification

CWE-89

References