Exploitation Summary
EIP tracks 1 public exploit for CVE-2010-5323. PoCs published by Metasploit.
AI-analyzed exploit summary This Metasploit module exploits a directory traversal vulnerability in Novell ZENworks Configuration Management 10.2.0 via the UploadServlet to upload a malicious WAR file outside the intended directory, leading to remote code execution.
Description
Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management (ZCM) 10 before 10.3 allows remote attackers to execute arbitrary code via a crafted WAR pathname in the filename parameter in conjunction with WAR content in the POST data, a different vulnerability than CVE-2010-5324.
Exploits (1)
This Metasploit module exploits a directory traversal vulnerability in Novell ZENworks Configuration Management 10.2.0 via the UploadServlet to upload a malicious WAR file outside the intended directory, leading to remote code execution.