PT-2014-6246

Name of the Vulnerable Software and Affected Versions ManageEngine Desktop Central versions prior to 9 build 90055 Description The issue allows remote attackers to execute arbitrary code via a .. dot dot in the fileName parameter to the "mdm/mdmLogUploader" endpoint. This is a directory traversal...