EDB-38221
functionalManageEngine OpManager - Remote Code Execution (Metasploit)
view exploit source exploit_dbverifiedtype remoteauthor Metasploitpublished 2015-09-17catalog exploit_db
01
exploited CVEs (2)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2015-7766US | high9.0 | Exploit | ||
PGSQL:SubmitQuery.do in ZOHO ManageEngine OpManager 11.6, 11.5, and earlier allows remote administrators to bypass SQL query restrictions via a comment in the query to api/json/adm… | ||||
| CVE-2015-7765US | high9.0OT high | Exploit | ||
ZOHO ManageEngine OpManager 11.5 build 11600 and earlier uses a hardcoded password of "plugin" for the IntegrationUser account, which allows remote authenticated users to obtain ad… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan