EDB-35890

PoC

ManageEngine ServiceDesk Plus 9.0 - SQL Injection

view exploit source exploit_dbtype webappsauthor Muhammad Ahmed Siddiquipublished 2015-01-22catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2015-1479USmedium6.5Exploit
SQL injection vulnerability in reports/CreateReportTable.jsp in ZOHO ManageEngine ServiceDesk Plus (SDP) before 9.0 build 9031 allows remote authenticated users to execute arbitrar…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan