2017-11-16 18:29:00 2017-11-28 00:08:44

Zoho ManageEngine Applications Manager 13 allows SQL injection via the /manageConfMons.do groupname parameter.