CVE

Id
93420  
CVE No.
CVE-2016-6600  
Status
Candidate  
Description
Directory traversal vulnerability in the file upload functionality in ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to upload and execute arbitrary JSP files via a .. (dot dot) in the fileName parameter to servlets/FileUploadServlet.  
Phase
Assigned (20160804)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
793638 93420 CVE-2016-6600 BUGTRAQ:20160808 [CVE-2016-6600/1/2/3]: Multiple vulnerabilities (RCE, file download, etc) in WebNMS Framework 5.2 / 5.2 SP1  View
793639 93420 CVE-2016-6600 URL:http://www.securityfocus.com/archive/1/archive/1/539159/100/0/threaded  View
793640 93420 CVE-2016-6600 EXPLOIT-DB:40229  View
793641 93420 CVE-2016-6600 URL:https://www.exploit-db.com/exploits/40229/  View
793642 93420 CVE-2016-6600 FULLDISC:20160812 [CVE-2016-6600/1/2/3]: Multiple vulnerabilities (RCE, file download, etc) in WebNMS Framework 5.2 / 5.2 SP1  View
793643 93420 CVE-2016-6600 URL:http://seclists.org/fulldisclosure/2016/Aug/54  View
793644 93420 CVE-2016-6600 MISC:http://packetstormsecurity.com/files/138244/WebNMS-Framework-5.2-SP1-Traversal-Weak-Obfuscation-User-Impersonation.html  View
793645 93420 CVE-2016-6600 MISC:https://blogs.securiteam.com/index.php/archives/2712  View
793646 93420 CVE-2016-6600 MISC:https://github.com/pedrib/PoC/blob/master/advisories/webnms-5.2-sp1-pwn.txt  View
793647 93420 CVE-2016-6600 CONFIRM:https://forums.webnms.com/topic/recent-vulnerabilities-in-webnms-and-how-to-protect-the-server-against-them  View
793648 93420 CVE-2016-6600 BID:92402  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
4261 JVNDB-2016-005034 AlienVault OSSIM および USM におけるクロスサイトスクリプティングの脆弱性 AlienVault OSSIM および USM には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2016-6913 93420 3.5 5.4 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005034.html  View