| Package | Affected versions | Patched versions |
|---|---|---|
| manageengine firewall analyzer | = 12.2 |
Zoho ManageEngine Firewall Analyzer 12200 has an unrestricted File Upload vulnerability in the "Group Chat" section. Any user can upload files with any extensions. By uploading a PHP file to the server, an attacker can cause it to execute in the server context, as demonstrated by /itplus/FileStorage/302/shell.jsp.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free