CVE-2014-6037

Directory traversal vulnerability in the agentUpload servlet in ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8.2 build 8020 allows remote attackers to execute arbitrary code by uploading a ZIP file which contains an executable file with .. dot dot sequences in its name, then accessing t...

CVE-2014-6037

CVE-2014-6037 describes a directory traversal vulnerability in the agentUpload servlet of ManageEngine EventLog Analyzer (ZOHO) affecting 9.0-build 9002 and 8.2-build 8020. An attacker can upload a ZIP containing an executable with.. sequences and then access that file under the web root via a di...

PT-2014-7018

Name of the Vulnerable Software and Affected Versions ManageEngine EventLog Analyzer versions 8.2 build 8020 through 9.0 build 9002 Description A directory traversal issue in the agentUpload servlet allows remote attackers to execute arbitrary code by uploading a ZIP file containing an executable...

CVE-2014-6037: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the agentUpload servlet in ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8.2 build 8020 allows remote attackers to execute arbitrary code by uploading a ZIP file which contains an executable file with .. dot dot sequences in its name, then accessing t...

Cross-site Scripting in EventLog Analyzer 9.0 build #9000

We discovered a vulnerability in the EventLog Analyzer web application. Vulnerability Type: Cross-site Scripting Original Release: June 20, 2014 Discovered by: Security Team - A2SECURE Artлm Tsvetkov [email protected] Sisco Barrera [email protected] Andrea Bodei [email protected]...

ManageEngine EventLog Analyzer agentUpload Directory Traversal (CVE-2014-6037)

A code execution vulnerability has been reported in ManageEngine EventLog Analyzer. The vulnerability is due to lack of authentication and insufficient input validation in agentUpload when processing zip files. A remote unauthenticated attacker can exploit this vulnerability by sending a speciall...

ManageEngine Eventlog Analyzer Arbitrary File Upload

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient include...

ManageEngine Eventlog Analyzer Arbitrary File Upload Exploit

This Metasploit module exploits a file upload vulnerability in ManageEngine Eventlog Analyzer. The vulnerability exists in the agentUpload servlet which accepts unauthenticated file uploads and handles zip file contents in a insecure way. By combining both weaknesses a remote attacker can achieve...

CVE-2014-6043

ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8.2 build 8020 does not properly restrict access to the database browser, which allows remote authenticated users to obtain access to the database via a direct request to event/runQuery.do. Fixed in Build 10000...

CVE-2014-6043

CVE-2014-6043 affects ZOHO ManageEngine EventLog Analyzer (versions 9.0 build 9002 and 8.2 build 8020). The issue is improper restriction of access to the database browser, allowing remote authenticated users to access the database via a direct request to event/runQuery.do. Fixed in Build 10000. ...

CVE-2014-6043

ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8.2 build 8020 does not properly restrict access to the database browser, which allows remote authenticated users to obtain access to the database via a direct request to event/runQuery.do. Fixed in Build 10000...

PT-2014-7020

Name of the Vulnerable Software and Affected Versions ManageEngine EventLog Analyzer versions 8.2 build 8020 through 9.0 build 9002 Description The issue allows remote authenticated users to obtain access to the database via a direct request to "event/runQuery.do" due to improper access...

CVE-2014-6043: Undefined Security Weakness

ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8.2 build 8020 does not properly restrict access to the database browser, which allows remote authenticated users to obtain access to the database via a direct request to event/runQuery.do. Fixed in Build 10000...

ManageEngine EventLog Analyzer - Multiple Vulnerabilities

No description provided by source. Mogwai Security Advisory MSA-2014-01 ---------------------------------------------------------------------- Title: ManageEngine EventLog Analyzer Multiple Vulnerabilities Product: ManageEngine EventLog Analyzer Affected versions: EventLog Analyzer 9.9 Build 9002...

ManageEngine EventLog Analyzer 'j_username' XSS

The remote web server fails to sanitize user-supplied input to the 'jusername' parameter of the 'jsecuritycheck' script before using it to generate dynamic HTML output. An attacker can exploit this flaw to inject arbitrary HTML or script code into a user's browser to be executed within the securi...

ManageEngine EventLog Analyzer

Binary data manageengineeventloganalyzerdetect.nbin...

ManageEngine EventLog Analyzer Default Credentials

The remote ManageEngine EventLog Analyzer web administration interface uses a known set of default credentials. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid77479; scriptversion"1.5";...

ManageEngine EventLog Analyzer 9.9 Authorization / Code Execution

Mogwai Security Advisory MSA-2014-01 ---------------------------------------------------------------------- Title: ManageEngine EventLog Analyzer Multiple Vulnerabilities Product: ManageEngine EventLog Analyzer Affected versions: EventLog Analyzer 9.9 Build 9002 on Windows/Linux Impact: critical...

ManageEngine EventLog Analyzer - Multiple Vulnerabilities (1)

ManageEngine EventLog Analyzer - Multiple Vulnerabilities 1 Mogwai Security Advisory MSA-2014-01 ---------------------------------------------------------------------- Title: ManageEngine EventLog Analyzer Multiple Vulnerabilities Product: ManageEngine EventLog Analyzer Affected versions: EventLo...

ManageEngine EventLog Analyzer - Multiple Vulnerabilities (1)

Mogwai Security Advisory MSA-2014-01 ---------------------------------------------------------------------- Title: ManageEngine EventLog Analyzer Multiple Vulnerabilities Product: ManageEngine EventLog Analyzer Affected versions: EventLog Analyzer 9.9 Build 9002 on Windows/Linux Impact: critical...