PT-2015-6784

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine SupportCenter Plus version 7.90 Description A directory traversal issue exists, allowing remote authenticated users to write to arbitrary files. This is achieved by including a .. dot dot in the component parameter in the...

CVE-2015-5149: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Zoho ManageEngine SupportCenter Plus 7.90 allows remote authenticated users to write to arbitrary files via a .. dot dot in the component parameter in the Request component to workorder/Attachment.jsp...