CVE-2010-5323
Novell ZENworks <10.3 - Path Traversal
Title source: llmDescription
Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management (ZCM) 10 before 10.3 allows remote attackers to execute arbitrary code via a crafted WAR pathname in the filename parameter in conjunction with WAR content in the POST data, a different vulnerability than CVE-2010-5324.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Metasploit · rubyremotemultiple
https://www.exploit-db.com/exploits/16784
Scores
EPSS
0.2444
EPSS Percentile
96.1%
Details
CWE
CWE-22
Status
published
Products (3)
novell/zenworks_configuration_management
10.0
novell/zenworks_configuration_management
10.1
novell/zenworks_configuration_management
10.2
Published
Jun 07, 2015
Tracked Since
Feb 18, 2026