Unrestricted file upload

Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution...

CVE-2021-37762

Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file overwrite leading to remote code execution...

CVE-2021-37919

Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution...

CVE-2021-37919

CVE-2021-37919 affects Zoho ManageEngine ADManager Plus v7110 and earlier, where an unrestricted file upload vulnerability can lead to remote code execution. Red Hat and CNVD/CVE records confirm the issue; update/patching guidance appears in ManageEngine release notes (7111) and NCsc advisories, ...

CVE-2021-37921

CVE-2021-37921 affects Zoho ManageEngine ADManager Plus, with versions 7110 and earlier vulnerable to an unrestricted file upload in the ReportsAction class that enables remote code execution. The vulnerability is described with high/critical impact (CVSSv3.1: 9.8; network access, no privileges, ...

CVE-2021-37923

CVE-2021-37923 affects Zoho ManageEngine ADManager Plus (versions 7110 and earlier). The vulnerability is an unrestricted file upload flaw that can lead to remote code execution. Affects the ADManager Plus file upload handling component, enabling an attacker to upload crafted payloads to execute ...

CVE-2021-37922

Zoho ManageEngine ADManager Plus

CVE-2021-37922

Zoho ManageEngine ADManager Plus version 7110 and prior is vulnerable to path traversal which allows copying of files from one directory to another...

CVE-2021-37918

CVE-2021-37918 affects Zoho ManageEngine ADManager Plus, versions 7110 and earlier, where an unrestricted file upload vulnerability could lead to remote code execution. Root cause is unrestricted file upload in the affected component. Impact described across sources is remote code execution with ...

CVE-2021-37930

Zoho ManageEngine ADManager Plus (version 7110 and earlier) suffers an unrestricted file upload vulnerability that enables remote code execution. Root cause: improper validation of uploaded files. Affected product: ADManager Plus. Impact: remote code execution with high/critical severity as noted...

CVE-2021-37929

CVE-2021-37929 affects Zoho ManageEngine ADManager Plus v7110 and earlier, where an unrestricted file upload vulnerability enables remote code execution. The issue stems from improper file upload restrictions in the application, allowing an attacker to push and execute arbitrary code on the serve...

CVE-2021-37928

Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution...

CVE-2021-37928

ADManager Plus 7110 and earlier versions are affected by an unrestricted file upload vulnerability that can lead to remote code execution. The issue (described across multiple sources as a file-upload flaw) enables an attacker to upload arbitrary files and execute code on the server. Affected pro...

CVE-2021-37926

Summary (CVE-2021-37926): Zoho ManageEngine ADManager Plus (versions up to and including 7110) is vulnerable to an unrestricted file upload that can lead to remote code execution. The CNVD/NVD entries corroborate file-upload–driven RCE against ADManager Plus 7110 and earlier. The NVD CVSS metrics...

CVE-2021-37926

Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution...

Zoho ManageEngine ADManager Plus 代码问题漏洞

ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. The software assists AD administrators and helpdesk technicians with day-to-day administrative tasks, such as batch management of user...

PT-2021-21867

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADManager Plus versions prior to 7111 Description: The issue allows for unrestricted file overwrite, which can lead to remote code execution. Recommendations: For Zoho ManageEngine ADManager Plus versions prior to 7111, upda...

Zoho ManageEngine ADManager Plus 代码问题漏洞

ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. ZOHO ManageEngine ADManager Plus 7110 and earlier versions contain a file upload vulnerability that can be exploited by attackers to cause...

PT-2021-21921

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADManager Plus versions 7110 and prior Description: The issue allows for unrestricted file upload, which can lead to remote code execution. Recommendations: For Zoho ManageEngine ADManager Plus versions 7110 and prior, updat...

PT-2021-22019

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADManager Plus versions prior to 7110 Description: The issue is related to a blind XXE vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or real-world...