Exploitation Summary
EIP tracks 2 public exploits for CVE-2015-8249.
PoCs published by Metasploit, sinn3r, including Metasploit module exploits/windows/http/manageengine_connectionid_write.
AI-analyzed exploit summary This Metasploit module exploits a file upload vulnerability in ManageEngine Desktop Central 9 by injecting a null byte to bypass file extension checks, allowing arbitrary JSP file upload and execution for remote code execution.
Description
The FileUploadServlet class in ManageEngine Desktop Central 9 before build 91093 allows remote attackers to upload and execute arbitrary files via the ConnectionId parameter.
Exploits (2)
This Metasploit module exploits a file upload vulnerability in ManageEngine Desktop Central 9 by injecting a null byte to bypass file extension checks, allowing arbitrary JSP file upload and execution for remote code execution.
This Metasploit module exploits a path traversal vulnerability in ManageEngine Desktop Central 9's FileUploadServlet to upload a malicious JSP file, achieving remote code execution as SYSTEM. The exploit leverages a null byte injection in the ConnectionId parameter to bypass file extension checks and place the payload in a web-accessible directory.
References (4)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H