EDB-34519

PoC

ManageEngine EventLog Analyzer - Multiple Vulnerabilities (1)

view exploit source exploit_dbtype webappsauthor Hans-Martin Muenchpublished 2014-09-01catalog exploit_db
01

exploited CVEs (2)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2014-6037UShigh7.5Exploit
Directory traversal vulnerability in the agentUpload servlet in ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8.2 build 8020 allows remote attackers to execute arbitrary c…
CVE-2014-6043USmedium6.5Exploit
ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8.2 build 8020 does not properly restrict access to the database browser, which allows remote authenticated users to obtain a…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan