manageengine social it plus vulnerabilities and exploits

(subscribe to this query)

Directory traversal vulnerability in the multipartRequest servlet in ZOHO ManageEngine OpManager 11.3 and previous versions, Social IT Plus 11.0, and IT360 10.3, 10.4, and previous versions allows remote attackers or remote authenticated users to delete arbitrary files via a .. (...

Zohocorp Manageengine Opmanager Zohocorp Manageengine It360 Zohocorp Manageengine It360 10.3.0 Zohocorp Manageengine Social It Plus 11.0

1 EDB exploit

SQL injection vulnerability in the com.manageengine.opmanager.servlet.UpdateProbeUpgradeStatus servlet in ZOHO ManageEngine OpManager 11.3 and 11.4, IT360 10.3 and 10.4, and Social IT Plus 11.0 allows remote attackers or remote authenticated users to execute arbitrary SQL command...

Zohocorp Manageengine Opmanager 11.3 Zohocorp Manageengine Opmanager 11.4 Zohocorp Manageengine Social It Plus 11.0 Zohocorp Manageengine It360 10.3.0 Zohocorp Manageengine It360 10.4

Multiple SQL injection vulnerabilities in ZOHO ManageEngine OpManager 11.3 and 11.4, IT360 10.3 and 10.4, and Social IT Plus 11.0 allow remote attackers or remote authenticated users to execute arbitrary SQL commands via the (1) OPM_BVNAME parameter in a Delete operation to the A...

Zohocorp Manageengine Social It Plus 11.0 Zohocorp Manageengine Opmanager 11.3 Zohocorp Manageengine Opmanager 11.4 Zohocorp Manageengine It360 10.4 Zohocorp Manageengine It360 10.3.0

2 EDB exploits

Multiple directory traversal vulnerabilities in ZOHO ManageEngine OpManager 8 (build 88xx) up to and including 11.4, IT360 10.3 and 10.4, and Social IT Plus 11.0 allow remote attackers or remote authenticated users to write and execute arbitrary files via a .. (dot dot) in the (1...

Zohocorp Manageengine Social It Plus 11.0 Zohocorp Manageengine It360 10.4 Zohocorp Manageengine It360 10.3.0 Zohocorp Manageengine Opmanager 8.8 Zohocorp Manageengine Opmanager 10.2 Zohocorp Manageengine Opmanager 11.0 Zohocorp Manageengine Opmanager 9.2 Zohocorp Manageengine Opmanager 9.4 Zohocorp Manageengine Opmanager 11.3 Zohocorp Manageengine Opmanager 11.4 Zohocorp Manageengine Opmanager 9.0 Zohocorp Manageengine Opmanager 9.1 Zohocorp Manageengine Opmanager 11.1 Zohocorp Manageengine Opmanager 11.2 Zohocorp Manageengine Opmanager 10.0 Zohocorp Manageengine Opmanager 10.1

2 EDB exploits

Directory traversal vulnerability in the com.me.opmanager.extranet.remote.communication.fw.fe.FileCollector servlet in ZOHO ManageEngine OpManager 8.8 up to and including 11.3, Social IT Plus 11.0, and IT360 10.4 and previous versions allows remote attackers or remote authenticat...

Zohocorp Manageengine Social It Plus 11.0 Zohocorp Manageengine It360 Zohocorp Manageengine Opmanager 8.8 Zohocorp Manageengine Opmanager 10.0 Zohocorp Manageengine Opmanager 10.2 Zohocorp Manageengine Opmanager 11.1 Zohocorp Manageengine Opmanager 9.0 Zohocorp Manageengine Opmanager 9.1 Zohocorp Manageengine Opmanager 11.2 Zohocorp Manageengine Opmanager 11.3 Zohocorp Manageengine Opmanager 10.1 Zohocorp Manageengine Opmanager 11.0 Zohocorp Manageengine Opmanager 9.2 Zohocorp Manageengine Opmanager 9.4

2 EDB exploits

Directory traversal vulnerability in the FileCollector servlet in ZOHO ManageEngine OpManager 11.4, 11.3, and previous versions allows remote malicious users to write and execute arbitrary files via a .. (dot dot) in the FILENAME parameter.

Zohocorp Manageengine Opmanager Zohocorp Manageengine Opmanager 11.4

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook