82 matches found
万户OA /UploadServlet 任意文件上传漏洞
任意文件上传 url: /UploadServlet 最后上传的文件路径就是: uploadFolder/path/fileId.substring0, 6/fileId，path和fileId两个参数可控，所以可以上传任意文件了 官方demo演示:...
Oracle Application Testing Suite UploadServlet filename Directory Traversal (CVE-2016-0490)
A directory path traversal vulnerability exists in Oracle's Application Testing Suite. The vulnerability is due to insufficient input validation while processing the HTTP request header filename. A remote unauthenticated attacker can exploit this vulnerability by sending a malicious request to th...
Oracle Application Testing Suite filename Header Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Application Testing Suite. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UploadServlet servlet. By providing a filename header containing ...
CVE-2016-0490
Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Test Manager for Web Apps, a different vulnerability than...
Directory traversal
Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Test Manager for Web Apps, a different vulnerability than...
PT-2016-4250
Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control versions 12.4.0.2 through 12.5.0.2 Description The issue affects confidentiality and integrity, potentially allowing remote attackers to execute arbitrary code via unknown vectors related to Test Manager...
Novell ZENworks Configuration Management Remote Management Component Directory Traversal Vulnerability
Novell ZENworks Configuration Management is a suite of configuration management solutions.Remote Management is a remote management component. A directory traversal vulnerability exists in the UploadServlet in the Remote Management component of Novell ZCM, which can be exploited by a remote attack...
Directory traversal
Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management ZCM 10 before 10.3 allows remote attackers to execute arbitrary code via a crafted WAR pathname in the filename parameter in conjunction with WAR content in the POST...
Directory traversal
Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management ZCM 10 before 10.3 allows remote attackers to execute arbitrary code via a zenworks-fileupload request with a crafted directory name in the type parameter, in...
PT-2015-3478
Name of the Vulnerable Software and Affected Versions Novell ZENworks Configuration Management ZCM versions prior to 10.3 Description A directory traversal issue exists in the UploadServlet component of the Remote Management feature. This allows remote attackers to execute arbitrary code by...
CVE-2015-0779: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in UploadServlet in Novell ZENworks Configuration Management ZCM 10 and 11 before 11.3.2 allows remote attackers to execute arbitrary code via a crafted directory name in the uid parameter, in conjunction with a WAR filename in the filename parameter and WAR...
CVE-2010-5324: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management ZCM 10 before 10.3 allows remote attackers to execute arbitrary code via a zenworks-fileupload request with a crafted directory name in the type parameter, in...
CVE-2010-5323: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management ZCM 10 before 10.3 allows remote attackers to execute arbitrary code via a crafted WAR pathname in the filename parameter in conjunction with WAR content in the POST...
PT-2015-3479
Name of the Vulnerable Software and Affected Versions Novell ZENworks Configuration Management ZCM versions prior to 10.3 Description A directory traversal issue exists in the UploadServlet of the Remote Management component. This allows remote attackers to execute arbitrary code by sending a...
Novell ZENworks Configuration Management Arbitrary File Upload Exploit
Exploit for java platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Novell ZENworks Configuration Management Arbitrary File Upload', 'Description'...
ZENworks /zenworks/UploadServlet 代码执行漏洞
No description provided by source...
Novell ZENworks Configuration Management UploadServlet File Upload
File upload vulnerability in Novell ZENworks Configuration Management UploadServlet Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
Novell ZENworks Configuration Management UploadServlet Directory Traversal (CVE-2015-0779)
A directory traversal vulnerability exists in Novell ZENworks Configuration Management. The vulnerability is due to insufficient input validation within the ZENworks Server's UploadServlet. Remote unauthenticated attackers can leverage this vulnerability to upload malicious files anywhere onto th...
HP Intelligent Management Center BIMS UploadServlet Information Disclosure (CVE-2014-2618)
An information disclosure vulnerability exists in the BIMS add-in module of HP Intelligent Management Center. The vulnerability is due to lack of authentication and insufficient input validation in the UploadServlet servlet when processing HTTP request parameters. By sending crafted HTTP requests...
Novell ZENworks Configuration Management Remote Execution
No description provided by source. $Id: zenworksuploadservlet.rb 11099 2010-11-22 17:53:49Z egypt $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...