Rocket Servergraph Admin Center fileRequestor Directory Traversal - Ver2 (CVE-2014-3914)

A code execution vulnerability exists in Rocket Servergraph Admin Center. The vulnerability occurs when making an HTTP POST request to the URI /SGPAdmin/fileRequest with the parameters cmd=writeDataFile, cmd=run, cmd=runClear or cmd=del, which can be present in the Body of the request. A remote...

CVE-2014-3914

A directory traversal vulnerability exists in the Admin Center for Tivoli Storage Manager (TSM) within Rocket ServerGraph 1.2 . This flaw allows remote unauthenticated attackers to interact with the fileRequestor and userRequest servlets. By using .. (dot dot) sequences in query parameters, attac...

Rocket Servergraph Admin Center fileRequestor Directory Traversal (CVE-2014-3914)

A code execution vulnerability exists in Rocket Servergraph Admin Center. The vulnerability occurs when making an HTTP POST request to the URI /SGPAdmin/fileRequest with the parameters cmd=writeDataFile, cmd=run, cmd=runClear or cmd=del, which can be present in the Body of the request. A remote...

Rocket Servergraph Admin Center fileRequestor Remote Code Execution

Exploit for multiple platform in category remote exploits This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Rocket Servergraph Admin Center fileRequestor Remote Code Execution',...

Rocket Servergraph Admin Center - fileRequestor Remote Code Execution (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Rocket Servergraph Admin Center fileRequestor Remote Code Execution', 'Description' = %q This module abuses several directory travers...