← Back to CVE List
CVE-2019-19649
Zoho ManageEngine Applications Manager before 13620 allows a remote unauthenticated SQL injection via the SyncEventServlet eventid parameter to the SyncEventServlet.java doGet function.
> MITRE Terms of Use apply – see LICENSE‑MITRE.txt