CVE-2018-13050

CRITICO 9.8CVE-2018-13050 · Published 02/07/2018 · updated 17/06/2026

Package	Affected versions	Patched versions
manageengine applications manager zohocorp	`= 13.0`	No fix yet

Description

A SQL Injection vulnerability exists in Zoho ManageEngine Applications Manager 13.x before build 13800 via the j_username parameter in a /j_security_check POST request.

References

x-f1v3/ForCve · Exploit
manageengine.com/products/applications_manager/issues.html · Vendor Advisory
manageengine.com/products/applications_manager/security-updates/security-updates-cve-2018-13050.html · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free