3 matches found
CVE-2011-2755
Directory traversal vulnerability in FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0 before Build 8012 allows remote attackers to read arbitrary files via unspecified vectors...
5CVSS7.1AI score0.30878EPSS
SaveExploits3References1
CVE-2011-2755
The CVE affects ManageEngine ServiceDesk Plus 8.0 before Build 8012, where FileDownload.jsp in the workorder module is vulnerable to directory traversal due to unsanitized FILENAME parameter. This allows remote, unauthenticated attackers to read arbitrary files via crafted requests (network vecto...
5CVSS6.9AI score0.30878EPSS
SaveExploits3References1Affected Software1
20