CVE-2014-3997

概要

参考情報

• seclists.org/fulldisclosure/2014/Aug/55 · Exploit
• seclists.org/fulldisclosure/2014/Aug/85 · Exploit
• raw.githubusercontent.com/pedrib/PoC/master/ManageEngine/me_dc_pmp_it360_sqli.txt · Exploit
• raw.githubusercontent.com/pedrib/PoC/master/msf_modules/manageengine_dc_pmp_sqli.rb · Exploit

manageengine it360 のその他の脆弱性

• CVE-2014-7863高 7.5The FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine Applications Manager before 11.9 build 11912, OpManager 8 through 1…
• CVE-2014-7866高 7.5Multiple directory traversal vulnerabilities in ZOHO ManageEngine OpManager 8 (build 88xx) through 11.4, IT360 10.3 and 10.4, and Social IT …
• CVE-2014-7868高 7.5Multiple SQL injection vulnerabilities in ZOHO ManageEngine OpManager 11.3 and 11.4, IT360 10.3 and 10.4, and Social IT Plus 11.0 allow remo…
• CVE-2014-7867高 7.5SQL injection vulnerability in the com.manageengine.opmanager.servlet.UpdateProbeUpgradeStatus servlet in ZOHO ManageEngine OpManager 11.3 a…
• CVE-2014-6036中 6.4Directory traversal vulnerability in the multipartRequest servlet in ZOHO ManageEngine OpManager 11.3 and earlier, Social IT Plus 11.0, and …