SonicALERT
Search

Sonicwall Signatures

 

Go to All Categories list.


  ManageEngine OpManager SubmitQuery.do Remote Code Execution

Category: WEB-ATTACKS      

PGSQL:SubmitQuery.do in ZOHO ManageEngine OpManager 11.6, 11.5, and earlier allows remote administrators to bypass SQL query restrictions via a comment in the query to api/json/admin/SubmitQuery.

References
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7766


Relevant Information