EIP-2026-109311

This is a vulnerability writeup detailing SQL injection flaws in ManageEngine Mobile Application Manager v10. The vulnerabilities are located in the DetailsView.do and Search.do modules, allowing remote attackers to execute SQL commands via the showMGDetails&groupId and viewName parameters.