https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 22:21:39 +0000 https://cve.radiocsirt.org/vuln/cnvd-2017-05226 cnvd-2017-05226 https://cve.radiocsirt.org/vuln/cnvd-2017-05226 https://cve.radiocsirt.org/vuln/euvd-2026-87863 EUVD-2026-87863 https://cve.radiocsirt.org/vuln/euvd-2026-87863 https://cve.radiocsirt.org/vuln/fkie_cve-2016-9488 <p>ManageEngine Applications Manager versions 12 and 13 before build 13200 suffer from remote SQL injection vulnerabilities. An unauthenticated attacker is able to access the URL /servlet/MenuHandlerServlet, which is vulnerable to SQL injection. The attacker could extract users&#39; password hashes, which are MD5 hashes without salt, and, depending on the database type and its configuration, could also execute operating system commands using SQL queries.</p> <p>ManageEngine Applications Manager versions 12 and 13 before build 13200 suffer from remote SQL injection vulnerabilities. An unauthenticated attacker is able to access the URL /servlet/MenuHandlerServlet, which is vulnerable to SQL injection. The attacker could extract users&#39; password hashes, which are MD5 hashes without salt, and, depending on the database type and its configuration, could also execute operating system commands using SQL queries.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-9488 https://cve.radiocsirt.org/vuln/ghsa-chxq-hg75-w349 <p>ManageEngine Applications Manager versions 12 and 13 before build 13200 suffer from remote SQL injection vulnerabilities. An unauthenticated attacker is able to access the URL /servlet/MenuHandlerServlet, which is vulnerable to SQL injection. The attacker could extract users&#39; password hashes, which are MD5 hashes without salt, and, depending on the database type and its configuration, could also execute operating system commands using SQL queries.</p> <p>ManageEngine Applications Manager versions 12 and 13 before build 13200 suffer from remote SQL injection vulnerabilities. An unauthenticated attacker is able to access the URL /servlet/MenuHandlerServlet, which is vulnerable to SQL injection. The attacker could extract users&#39; password hashes, which are MD5 hashes without salt, and, depending on the database type and its configuration, could also execute operating system commands using SQL queries.</p> https://cve.radiocsirt.org/vuln/ghsa-chxq-hg75-w349 https://cve.radiocsirt.org/vuln/gsd-2016-9488 gsd-2016-9488 https://cve.radiocsirt.org/vuln/gsd-2016-9488