CVE-2011-2756

FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0 before Build 8012 does not require authentication, which allows remote attackers to read files from a specific directory via unspecified vectors...

CVE-2011-2756

FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0 before Build 8012 does not require authentication, which allows remote attackers to read files from a specific directory via unspecified vectors...

CVE-2011-2756

CVE-2011-2756 affects ManageEngine ServiceDesk Plus 8.0 before Build 8012. A flaw in FileDownload.jsp (workorder/FileDownload.jsp) allows unauthenticated remote attackers to read files from a specific directory via the FILENAME parameter due to inadequate input sanitization, enabling directory-tr...