NuytsTech Security

CVE-2016-6600

by ·

Directory traversal vulnerability in the file upload functionality in ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to upload and execute arbitrary JSP files via a .. (dot dot) in the fileName parameter to servlets/FileUploadServlet.

Date published : 2017-01-23

http://www.securityfocus.com/bid/92402

http://www.securityfocus.com/archive/1/539159/100/0/threaded

Tags: