writeups.xyz / CVE-2022-40300: SQL Injection In Manageengine Privileged Access Management

Submitter : c2a

Date: 23 November 2022

Bounty : undisclosed

Vulnerabilities :

• SQL Injection

Programs :

• Zoho (ManageEngine)

Authors :

• Justin Hung
• Dusan Stevanovic

Link :
https://www.zerodayinitiative.com/blog/2022/11/22/cve-2022-40300-sql-injection-in-manageengine-privileged-access-management