ManageEngine ServiceDesk Plus Arbitrary File Upload

Discussion in 'News Aggregator' started by Packet Storm, 8 Oct 2015.

  1. Packet Storm

    Packet Storm Guest

    This Metasploit module exploits a file upload vulnerability in ManageEngine ServiceDesk Plus. The vulnerability exists in the FileUploader servlet which accepts unauthenticated file uploads. This Metasploit module has been tested successfully on versions v9 b9000 - b9102 in Windows and Linux. The MSP versions do not expose the vulnerable servlet.

    Continue reading...
     
    #1 Packet Storm, 8 Oct 2015
(You must log in or sign up to post here.)

Share This Page

Loading...