A vulnerability was found in Zoho ManageEngine Applications Manager up to 14550 (Log Management Software). It has been declared as critical. Affected by this vulnerability is an unknown code of the file /showReports.do. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
Zoho ManageEngine Applications Manager up to 14550 /showReports.do resourceid access control
Description Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the ‘id’ parameter at /pms/admin/prisons/view_prison.php:4 References
Description A vulnerability in the logging component of Cisco Adaptive Security Device Manager (ASDM) could allow an authenticated, local attacker