Security Advisory
CVE-2017-16543
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Zoho ManageEngine Applications Manager 13 before build 13500 allows SQL injection via GraphicalView.do, as demonstrated by a crafted viewProps yCanvas field or viewid parameter.