CVE-2010-1044

ManageEngine OpUtils 5.0 - SQL Injection

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2010-1044. PoCs published by Asheesh Anaconda.

AI-analyzed exploit summary This exploit demonstrates an SQL injection vulnerability in ManageEngine OpUtils 5 via the 'Login.do' endpoint. The PoC shows how an attacker can inject malicious SQL queries through the 'password' parameter to manipulate the application's database queries.

Description

SQL injection vulnerability in Login.do in ManageEngine OpUtils 5.0 allows remote attackers to execute arbitrary SQL commands via the isHttpPort parameter.

Exploits (1)

exploitdb WORKING POC
by Asheesh Anaconda · textwebappswindows
https://www.exploit-db.com/exploits/11330

This exploit demonstrates an SQL injection vulnerability in ManageEngine OpUtils 5 via the 'Login.do' endpoint. The PoC shows how an attacker can inject malicious SQL queries through the 'password' parameter to manipulate the application's database queries.

Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: ManageEngine OpUtils 5
No auth needed
Prerequisites: Network access to the target application · ManageEngine OpUtils 5 installed and running
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/11330
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/56102
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/38082

Scores

EPSS 0.0097
EPSS Percentile 57.2%

Details

CWE
CWE-89
Status published
Products (1)
manageengine/oputils 5.0
Published Mar 23, 2010
Tracked Since Feb 18, 2026