Zoho ManageEngine Applications Manager 13 before build 13500 allows Post-authentication SQL injection via the name parameter in a manageApplications.do?method=insert request.
| Software | From | Fixed in |
|---|---|---|
| zohocorp / manageengine_applications_manager | 13.0 | 13.0.x |