Security Advisory
CVE-2015-1479
6.5
Vulnerability Description
SQL injection vulnerability in reports/CreateReportTable.jsp in ZOHO ManageEngine ServiceDesk Plus (SDP) before 9.0 build 9031 allows remote authenticated users to execute arbitrary SQL commands via the site parameter.
Published Date
February 4, 2015
Official Source
NIST NVD Advisory