Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
SQL Injection
Vulnerability Description
Zohocorp ManageEngine OpManager, OpManager Plus, OpManager MSP and RMM versions 128317 and below are vulnerable to authenticated SQL injection in the URL monitoring.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Vulnerability Title
ZOHO多款产品 安全漏洞
Vulnerability Description
ZOHO ManageEngine OpManager等都是美国卓豪（ZOHO）公司的产品。ZOHO ManageEngine OpManager是一款综合性网络监控软件。ZOHO ManageEngine OpManager Plus是一个适用于 Windows 和 Linux 系统的 IT 运营管理解决方案。ZOHO ManageEngine OpManager MSP是一款易于使用的网络和服务器管理软件。 ZOHO多款产品存在安全漏洞，该漏洞源于在URL监控中容易受到经过身份验证的SQL注入攻击。以
CVSS Information
N/A
Vulnerability Type
N/A