CVE-2018-12999

概要

参考情報

• packetstormsecurity.com/files/148635/Zoho-ManageEngine-13-13790-build-XSS-File-Read-File-Deletion.html · Exploit
• seclists.org/fulldisclosure/2018/Jul/74 · Exploit
• cnnvd.org.cn/web/xxk/ldxqById.tag · Exploit
• unh3x/just4cve · Exploit

manageengine desktop central のその他の脆弱性

• CVE-2023-4769高 8.8A SSRF vulnerability has been found in ManageEngine Desktop Central affecting version 9.1.0, specifically the /smtpConfig.do component. This…
• CVE-2023-4768中 6.1A CRLF injection vulnerability has been found in ManageEngine Desktop Central affecting version 9.1.0. This vulnerability could allow a remo…
• CVE-2023-4767中 6.1A CRLF injection vulnerability has been found in ManageEngine Desktop Central affecting version 9.1.0. This vulnerability could allow a remo…
• CVE-2022-48362高 8.8Zoho ManageEngine Desktop Central and Desktop Central MSP before 10.1.2137.2 allow directory traversal via computerName to AgentLogUploadSer…
• CVE-2022-23779中 5.3Zoho ManageEngine Desktop Central before 10.1.2137.8 exposes the installed server name to anyone. The internal hostname can be discovered by…