CVE ID:	CVE-2014-7864
Description:	Multiple SQL injection vulnerabilities in the FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine OpManager 8 through 11.5 build 11400 and IT360 10.5 and earlier allow remote attackers and remote authenticated users to execute arbitrary SQL commands via the (1) customerName or (2) serverRole parameter in a standbyUpdateInCentral operation to servlet/com.adventnet.me.opmanager.servlet.FailOverHelperServlet.
Test IDs:	1.3.6.1.4.1.25623.1.0.805473
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2014-7864 Bugtraq: 20150128 [The ManageOwnage Series, part XII]: Multiple vulnerabilities in FailOverServlet (OpManager, AppManager, IT360) (Google Search) http://www.securityfocus.com/archive/1/534575/100/0/threaded http://seclists.org/fulldisclosure/2015/Jan/114 http://packetstormsecurity.com/files/130162/ManageEngine-File-Download-Content-Disclosure-SQL-Injection.html https://raw.githubusercontent.com/pedrib/PoC/master/ManageEngine/me_failservlet.txt XForce ISS Database: manageengine-cve20147864-sql-injection(100555) https://exchange.xforce.ibmcloud.com/vulnerabilities/100555