CVE-2018-13050 in Applications Manager
Summary
A SQL Injection vulnerability exists in Zoho ManageEngine Applications Manager 13.x via the j_username parameter in a /j_security_check POST request.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
07/02/2018
Disclosure
07/02/2018
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 120161 | Zoho ManageEngine Applications Manager j_security_check sql injection | 89 | High | Not defined | CVE-2018-13050 |