CWE Code: 89
Vulnerability Type: sql_injection
CVSS Score: 10.0
CWE Name:  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Summary: zoho manageengine applications manager 12 through 14 allows faulttemplateoptions.jsp resourceid sql injection. subsequently, an unauthenticated user can gain the authority of system on the server by uploading a malicious file via the "execute program action(s)" feature.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2019-04-23
Last Modified Date: 2019-04-26