Exploitation Summary
EIP tracks 3 public exploits for CVE-2016-1593.
PoCs published by Metasploit, Pedro Ribeiro, including Metasploit module exploits/multi/http/novell_servicedesk_rce.
AI-analyzed exploit summary This Metasploit module exploits an authenticated arbitrary file upload vulnerability via directory traversal in Novell ServiceDesk, allowing remote code execution on versions 6.5 to 7.1.0. It supports both Linux and Windows targets by uploading a malicious JSP payload.
Description
Directory traversal vulnerability in the import users feature in Micro Focus Novell Service Desk before 7.2 allows remote authenticated administrators to upload and execute arbitrary JSP files via a .. (dot dot) in a filename within a multipart/form-data POST request to a LiveTime.woa URL.
Exploits (3)
This Metasploit module exploits an authenticated arbitrary file upload vulnerability via directory traversal in Novell ServiceDesk, allowing remote code execution on versions 6.5 to 7.1.0. It supports both Linux and Windows targets by uploading a malicious JSP payload.
This is a detailed writeup describing multiple vulnerabilities in Novell Service Desk, including arbitrary file upload (CVE-2016-1593), information disclosure (CVE-2016-1594), HQL injection (CVE-2016-1595), and stored XSS (CVE-2016-1596). It includes technical details, affected versions, and proof-of-concept examples for each vulnerability.
This Metasploit module exploits an authenticated arbitrary file upload vulnerability in Novell ServiceDesk via directory traversal, allowing remote code execution on Windows and Linux installations. It uploads a malicious JSP file containing a base64-encoded payload to achieve execution.
References (8)
Scores
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H