EDB-17503

PoC

ManageEngine ServiceDesk 8.0.0.12 - Database Disclosure

view exploit source exploit_dbtype webappsauthor @ygoltsevpublished 2011-07-07catalog exploit_db

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2011-2757US	medium5.0	39.4% (99th)	Exploit	2011-07-17
Directory traversal vulnerability in FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0.0.12 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in th…
CVE-2011-2755US	medium5.0	30.9% (98th)	Exploit	2011-07-17
Directory traversal vulnerability in FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0 before Build 8012 allows remote attackers to read arbitrary files via unspecified vectors…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.