CVE-2016-6600 Directory traversal vulnerability in the file upload functionality in ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to upload and execute arbitrary JSP files via a .. (dot dot) in the....
CriticalCVSS 9.8
EPSS 90.8%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in the file upload functionality in ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to upload and execute arbitrary JSP files via a .. (dot dot) in the fileName parameter to servlets/FileUploadServlet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Zohocorp webnms framework | = 5.2 | No fix listed |
| Zohocorp webnms framework | = 5.2-sp1 | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory
- 20160812 [CVE-2016-6600/1/2/3]: Multiple vulnerabilities (RCE, file download, etc) in WebNMS Framework 5.2 / 5.2 SP1 exploit mailing-list
- 20160808 [CVE-2016-6600/1/2/3]: Multiple vulnerabilities (RCE, file download, etc) in WebNMS Framework 5.2 / 5.2 SP1 mailing-list
- 92402 third-party-advisory vdb-entry
- blogs.securiteam.com exploit technical-description third-party-advisory
- forums.webnms.com
- github.com exploit
- 40229 exploit third-party-advisory