ID de Prueba:	1.3.6.1.4.1.25623.1.0.105084
Categoría:	Web application abuses
Título:	Multiple ManageEngine Products 7.0 - 9.0.054 Arbitrary File Upload Vulnerability
Resumen:	Multiple ManageEngine Products are prone to an; arbitrary-file-upload vulnerability.
Descripción:	Summary: Multiple ManageEngine Products are prone to an arbitrary-file-upload vulnerability. Vulnerability Impact: An attacker may leverage this issue to upload arbitrary files to the affected computer. This can result in arbitrary code execution within the context of the vulnerable application. Affected Software/OS: ManageEngine Desktop Central/MSP versions 7.0 through 9.0.054. Solution: Ask the vendor for an update. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2014-5005 http://www.exploit-db.com/exploits/34594 http://seclists.org/fulldisclosure/2014/Aug/88 https://raw.githubusercontent.com/pedrib/PoC/master/ManageEngine/me_dc9_file_upload.txt http://osvdb.org/show/osvdb/110643 Common Vulnerability Exposure (CVE) ID: CVE-2014-5006 http://osvdb.org/show/osvdb/110644
Copyright	Copyright (C) 2014 Greenbone Networks GmbH

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.