CVE-2014-6037

This Metasploit module exploits an unauthenticated file upload vulnerability in ManageEngine Eventlog Analyzer via the agentUpload servlet, allowing remote code execution through insecure handling of ZIP file contents. It supports multiple versions (7.0-9.9) and platforms (Windows/Linux/Java).

This exploit demonstrates an unauthenticated remote code execution vulnerability in ManageEngine EventLog Analyzer via a malicious ZIP file upload to the 'agentUpload' servlet, allowing arbitrary file placement in the web root. It also highlights an authorization bypass issue enabling low-privileged users to access the database browser.

This Metasploit module exploits an unauthenticated file upload vulnerability in ManageEngine Eventlog Analyzer (CVE-2014-6037) by uploading a malicious ZIP file containing a JSP payload, leading to remote code execution. It supports multiple versions and platforms, including Java, Windows, and Linux targets.