CVE:CVE-2020-9347
CNNVD:CNNVD-202003-999
ZOHO ManageEngine Password Manager Pro是美国卓豪（ZOHO）公司的一款密码管理器。
ZOHO ManageEngine Password Manager Pro 10.x及之前版本中Export Passwords功能存在注入漏洞。远程攻击者可借助特制的名称利用该漏洞执行任意代码。
solution:Upgrade zohocorp manageengine_password_manager_pro to a higher version than 10.0,10.0:build10001,10.1:build10100,10.1:build10101,10.1:build10102,10.1:build10103,10.1:build10104,10.2:build10200,10.3:build10300,10.3:build10301,10.3:build10302,10.4,10.4:build10400,10.4:build10401,10.4:build10402,and avoid the version 10.0,10.0:build10001,10.1:build10100,10.1:build10101,10.1:build10102,10.1:build10103,10.1:build10104,10.2:build10200,10.3:build10300,10.3:build10301,10.3:build10302,10.4,10.4:build10400,10.4:build10401,10.4:build10402