Novell ZENworks Configuration Management File Upload (CVE-2013-1080)

A file upload vulnerability has been reported in Novel ZENworks Configuration Management...

CVE-2013-1080

creationtimestamp| type| source ---|---|--- 2013-04-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24938 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/zenworkscontrolcenterupload.rb 2025-02-06...

DSquare Exploit Pack: D2SEC_ZCM2

Name| d2seczcm2 ---|--- CVE| CVE-2013-1080 Exploit Pack| D2ExploitPack Description| Novell ZENWorks Configuration Management Arbitrary File Upload Remote Code Execution Vulnerability Notes|...

CVE-2013-1080

CVE-2013-1080 affects Novell ZENworks Configuration Management 10.3 and 11.2 prior to 11.2.4. The vulnerability arises from improper authentication for zenworks/jsp/index.jsp, enabling directory traversal and upload/execution of arbitrary programs via TCP port 443. Public references and connected...