Threats tagged 'ghsa-7hq5-2jh9-qmh8'

Zoho Corporation ManageEngine ADAudit Plus versions below 8711 contain an authenticated second order SQL injection vulnerability in the custom reports module. This vulnerability allows an attacker with valid credentials to execute malicious SQL commands indirectly, potentially leading to full compromise of confidentiality, integrity, and availability of the affected system. The vulnerability has a high severity with a CVSS score of 8.8. No explicit patch or remediation details are provided in the available data.