CVE-2010-5323
Novell ZENworks <10.3 - Path Traversal
Title source: llmDescription
Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management (ZCM) 10 before 10.3 allows remote attackers to execute arbitrary code via a crafted WAR pathname in the filename parameter in conjunction with WAR content in the POST data, a different vulnerability than CVE-2010-5324.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Metasploit · rubyremotemultiple
https://www.exploit-db.com/exploits/16784
Scores
EPSS
0.2291
EPSS Percentile
95.8%
Classification
CWE
CWE-22
Status
draft
Affected Products (3)
novell/zenworks_configuration_management
novell/zenworks_configuration_management
novell/zenworks_configuration_management
Timeline
Published
Jun 07, 2015
Tracked Since
Feb 18, 2026