---
id: 7405
title: "Zoho ManageEngine Applications Manager: From SQLi to RCE & More"
source_domain: blog.viettelcybersecurity.com
source_url: "https://blog.viettelcybersecurity.com/zoho-manageengine-applications-manager-from-sqli-to-rce-more/"
published_at: "2020-02-21T04:00:00Z"
tags: ["rce", "vulnerability-research", "manageengine", "red-team", "sqli", "zoho"]
phying_url: "https://phying.com/item/7405"
lang: en
---

# Zoho ManageEngine Applications Manager: From SQLi to RCE & More

## Summary

A red team walkthrough of ManageEngine Applications Manager build 13100, showing how its many SQL injection flaws, which carry RCE payloads, can be chained into full system compromise.

## Intelligence Metadata

- **Sources:** blog.viettelcybersecurity.com
- **Published:** 2020-02-21T04:00:00Z
- **Original:** https://blog.viettelcybersecurity.com/zoho-manageengine-applications-manager-from-sqli-to-rce-more/
- **Phying News:** https://phying.com/item/7405