Directory Traversal Vulnerabilities in ZOHO ManageEngine OpManager, IT360, and Social IT Plus

CVE-2014-7866

What is CVE-2014-7866?

Multiple vulnerabilities in ZOHO ManageEngine OpManager, IT360, and Social IT Plus allow remote attackers or authenticated users to exploit directory traversal flaws. By manipulating the fileName and zipFileName parameters, an attacker could write and execute arbitrary files, potentially leading to remote code execution. These vulnerabilities pose significant risks, as they enable unauthorized file access and manipulation, which can compromise the integrity and confidentiality of the systems affected.

References