CVE-2015-5149
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
28Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 10%
from disclosure to weaponsame day
Published on NVDJun 30
1st PoCJun 19
Directory traversal vulnerability in Zoho ManageEngine SupportCenter Plus 7.90 allows remote authenticated users to write to arbitrary files via a .. (dot dot) in the component parameter in the Request component to workorder/Attachment.jsp.
Affected products
n/a · n/apublic PoCs found — 3
exploitdbwww.exploit-db.com/exploits/37322unverifiedcve_referencepacketstormsecurity.com/files/132376/ManageEngine-SupportCenter-Plus-7.90-XSS-Traversal-Password-Disclosure.htmlunverifiedcve_referencewww.exploit-db.com/exploits/37322/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.