exploit/windows/http/manage_engine_opmanager_rce

PoC

ManageEngine OpManager Remote Code Execution

view exploit source metasploittype exploitpublished 2015-09-14catalog metasploit

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2015-7766US	high9.0	80.6% (100th)	Exploit	2015-10-09
PGSQL:SubmitQuery.do in ZOHO ManageEngine OpManager 11.6, 11.5, and earlier allows remote administrators to bypass SQL query restrictions via a comment in the query to api/json/adm…
CVE-2015-7765US	high9.0OT high	67.3% (99th)	Exploit	2015-10-09
ZOHO ManageEngine OpManager 11.5 build 11600 and earlier uses a hardcoded password of "plugin" for the IntegrationUser account, which allows remote authenticated users to obtain ad…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.