⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →

CVE-2014-5006

HIGH · 7.5 CVSS Gepubliceerd: 21-10-2014 CWE-22

Beschrijving

Directory traversal vulnerability in ZOHO ManageEngine Desktop Central (DC) before 9 build 90055 allows remote attackers to execute arbitrary code via a .. (dot dot) in the fileName parameter to mdm/mdmLogUploader.

Vendors

Zohocorp

Affected products

Manageengine Desktop Central

References

osvdb.org
seclists.org
www.exploit-db.com
raw.githubusercontent.com
www.manageengine.com