ManageEngine DC - agentLogUploader Detection (CVE-2013-7390)

Detects CVE-2013-7390/2014-5007 by POSTing to agentLogUploader and matching X-dc-header: yes. !/usr/bin/env python3 -- coding: utf-8 -- """ManageEngine Desktop Central agentLogUploader upload CVE-2013-7390.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

CVE-2014-5007: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the agentLogUploader servlet in ZOHO ManageEngine Desktop Central DC and Desktop Central Managed Service Providers MSP edition before 9 build 90055 allows remote attackers to write to and execute arbitrary files as SYSTEM via a .. dot dot in the filename...

PT-2020-7694

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Desktop Central versions prior to 9 build 90055 Zoho ManageEngine Desktop Central Managed Service Providers edition versions prior to 9 build 90055 Description A directory traversal issue exists in the agentLogUploader servle...