CVE-2016-6600
CRITICALZOHO WebNMS Framework <5.2-5.2 SP1 - Path Traversal
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2016-6600.
PoCs published by Pedro Ribeiro, including Metasploit module exploits/multi/http/webnms_file_upload.
AI-analyzed exploit summary The document describes multiple vulnerabilities in WebNMS Framework Server 5.2 and 5.2 SP1, including directory traversal leading to RCE, file download via traversal, weak password obfuscation, and user impersonation. CVE-2016-6603 specifically covers user account impersonation via the 'UserName' HTTP header.
Description
Directory traversal vulnerability in the file upload functionality in ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to upload and execute arbitrary JSP files via a .. (dot dot) in the fileName parameter to servlets/FileUploadServlet.
Exploits (2)
The document describes multiple vulnerabilities in WebNMS Framework Server 5.2 and 5.2 SP1, including directory traversal leading to RCE, file download via traversal, weak password obfuscation, and user impersonation. CVE-2016-6603 specifically covers user account impersonation via the 'UserName' HTTP header.
This Metasploit module exploits an arbitrary file upload vulnerability in WebNMS Framework Server 5.2 via directory traversal in the FileUploadServlet. It uploads a malicious JSP file to achieve remote code execution on Linux or Windows targets.
References (8)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H