CVE-2014-6034

Related Files

ManageEngine OpManager / Social IT Arbitrary File Upload

Posted Sep 29, 2014

Authored by Pedro Ribeiro | Site metasploit.com

This Metasploit module exploits a file upload vulnerability in ManageEngine OpManager and Social IT. The vulnerability exists in the FileCollector servlet which accepts unauthenticated file uploads. This Metasploit module has been tested successfully on OpManager v8.8 - v11.3 and on version 11.0 of SocialIT for Windows and Linux.

tags | exploit, file upload

systems | linux, windows

advisories | CVE-2014-6034

SHA-256 | e9c53edc4a81c1f18958ddfa8f5eddf60866488e72784884428750e9a058b73b

Download | Favorite | View

ManageEngine Code Execution / File Deletion

Posted Sep 29, 2014

Authored by Pedro Ribeiro

ManageEngine OpManager, Social IT Plus, and IT360 suffer from remote code execution via upload and arbitrary file deletion vulnerabilities.

tags | exploit, remote, arbitrary, vulnerability, code execution, file inclusion

advisories | CVE-2014-6034, CVE-2014-6035, CVE-2014-6036

SHA-256 | 375e267357239b52901647072b3a0b930fa59bec9185067e661bf2bcb84fcf70

Download | Favorite | View