CVE-2014-6035

2014-12-04T12:59:03
ID CVE-2014-6035
Type cve
Reporter NVD
Modified 2014-12-05T08:33:00

Description

Directory traversal vulnerability in the FileCollector servlet in ZOHO ManageEngine OpManager 11.4, 11.3, and earlier allows remote attackers to write and execute arbitrary files via a .. (dot dot) in the FILENAME parameter.