auxiliary/admin/http/webnms_cred_disclosure

functional

WebNMS Framework Server Credential Disclosure

view exploit source metasploittype auxiliarypublished 2016-07-04catalog metasploit

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2016-6602US	critical9.8OT high	55.7% (99th)	Exploit	2017-01-23
ZOHO WebNMS Framework 5.2 and 5.2 SP1 use a weak obfuscation algorithm to store passwords, which allows context-dependent attackers to obtain cleartext passwords by leveraging acce…
CVE-2016-6601US	high7.5	97.5% (100th)	Exploit	2017-01-23
Directory traversal vulnerability in the file download functionality in ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to read arbitrary files via a .. (dot dot) in…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.