ManageEngine OpManager Multiple Directory Traversal Vulnerabilities

The version of ManageEngine OpManager installed on the remote host is affected by multiple directory traversal vulnerabilities : - The FileCollector servlet fails to properly sanitize user-supplied input to the 'regionID' and 'FILENAME' parameters when uploading files. This allows a remote attack...

Directory traversal

Directory traversal vulnerability in the FileCollector servlet in ZOHO ManageEngine OpManager 11.4, 11.3, and earlier allows remote attackers to write and execute arbitrary files via a .. dot dot in the FILENAME parameter...

CVE-2014-6035: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the FileCollector servlet in ZOHO ManageEngine OpManager 11.4, 11.3, and earlier allows remote attackers to write and execute arbitrary files via a .. dot dot in the FILENAME parameter...

PT-2014-7016

Name of the Vulnerable Software and Affected Versions ZOHO ManageEngine OpManager versions 11.4 and earlier Description A directory traversal issue exists in the FileCollector servlet, allowing remote attackers to write and execute arbitrary files. This is achieved by using a .. dot dot in the...

PT-2014-7015

Name of the Vulnerable Software and Affected Versions ManageEngine OpManager versions 8.8 through 11.3 Social IT Plus version 11.0 IT360 versions 10.4 and earlier Description The issue allows remote attackers or remote authenticated users to write to and execute arbitrary WAR files. This is...

ManageEngine OpManager FileCollector Servlet File Upload

File upload vulnerability in ManageEngine OpManager FileCollector servlet regionID parameter Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

ManageEngine OpManager / Social IT - Arbitrary File Upload (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'ManageEngine OpManager / Social IT Arbitrary File Upload', 'Description' = %q This module exploits a file upload vulnerability in...