Directory Traversal Vulnerability in ManageEngine SupportCenter Plus Product by Zoho
CVE-2014-100002
Currently unrated
Key Information:
- Vendor
Zohocorp
- Vendor
- CVE Published:
- 13 January 2015
Badges
👾 Exploit Exists🟡 Public PoC🟣 EPSS 78%
What is CVE-2014-100002?
ManageEngine SupportCenter Plus versions prior to 7917 are susceptible to a directory traversal vulnerability that enables remote attackers to gain unauthorized access to system files. By manipulating the attach parameter in the WorkOrder.do file and using dot-dot encoded slashes, attackers can effectively read arbitrary files, potentially exposing sensitive data and compromising the integrity of the affected system.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.