2017-11-16 18:29:00 2018-08-07 03:29:01

Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /showresource.do resourceid parameter in a showPlasmaView action.