RULE(RULE ID:312700)

Rule General Information
Release Date: 2016-11-21
Rule Name: WEB-SQL-INJECTION ManageEngine Multiple Products customerName SQL Injection Remote Code Execution -1.1 (ZDI-15-232)
Severity:
CVE ID:
Rule Protection Details
Description: An SQL injection vulnerability exists in ManageEngine Applications Manager and ManageEngine IT360 MSPEdition.
Impact: SQL injection
Affected OS: Windows, Other Unix, FreeBSD, Linux
Reference: ZeroDayInitiative:ZDI-15-232
Solutions
Update vendor's patch.