PGSQL:SubmitQuery.do in ZOHO ManageEngine OpManager 11.6, 11.5, and earlier allows remote administrators to bypass SQL query restrictions via a comment in the query to api/json/admin/SubmitQuery, as demonstrated by "INSERT/**/INTO."
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2015-10-09T14:00:00Z
Updated: 2024-09-17T01:10:42.494Z
Reserved: 2015-10-09T00:00:00Z
Link: CVE-2015-7766
Vulnrichment
No data.
NVD
Status : Modified
Published: 2015-10-09T14:59:08.390
Modified: 2024-11-21T02:37:22.020
Link: CVE-2015-7766
Redhat
No data.