CVE-2011-2757
ManageEngine ServiceDesk Plus <= 8.0.0.12 - Path Traversal via FileDownload.jsp FILENAME Parameter
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2011-2757.
PoCs published by xistence, Keith Lee, @ygoltsev, including Metasploit module auxiliary/scanner/http/servicedesk_plus_traversal.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in ManageEngine Support Center Plus 7.8 build <= 7801, allowing unauthenticated attackers to read arbitrary files on the server, including sensitive files like /etc/shadow or database files.
Description
Directory traversal vulnerability in FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0.0.12 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the FILENAME parameter. NOTE: this might overlap the US-CERT VU#543310 issue.
Exploits (4)
This exploit demonstrates a directory traversal vulnerability in ManageEngine Support Center Plus 7.8 build <= 7801, allowing unauthenticated attackers to read arbitrary files on the server, including sensitive files like /etc/shadow or database files.
This is a writeup describing a directory traversal vulnerability in ManageEngine ServiceDesk Plus 8.0. The vulnerability allows attackers to access local files by manipulating file paths with '../' sequences.
This Perl script exploits a directory traversal vulnerability in ManageEngine ServiceDesk <= 8.0.0.12 to disclose database backup files. It retrieves server logs to locate backup paths and constructs URLs to download them.
This Metasploit module exploits an unauthenticated path traversal vulnerability in ManageEngine ServiceDesk Plus (CVE-2011-2757) to retrieve arbitrary files from the filesystem. It sends a crafted HTTP GET request to 'FileDownload.jsp' with traversal sequences to access files outside the intended directory.