CVE-2011-2755

The exploit demonstrates a directory traversal vulnerability in ManageEngine Support Center Plus 7.8 build <= 7801, allowing unauthenticated attackers to read arbitrary files on the server by manipulating the 'path' parameter in the FileDownload.jsp endpoint.

The document describes a directory traversal vulnerability in ManageEngine ServiceDesk Plus 8.0, allowing attackers to access local files via crafted requests. It includes a proof-of-concept request demonstrating the issue and references the patch.

This Perl script exploits a directory traversal vulnerability in ManageEngine ServiceDesk <= 8.0.0.12 to disclose database backup files. It constructs paths to access server logs and backup directories, then generates download links for these files.