CVE-2016-6600

CRITICAL

ZOHO WebNMS Framework <5.2-5.2 SP1 - Path Traversal

Title source: llm

Description

Directory traversal vulnerability in the file upload functionality in ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to upload and execute arbitrary JSP files via a .. (dot dot) in the fileName parameter to servlets/FileUploadServlet.

Exploits (2)

exploitdb WRITEUP

by Pedro Ribeiro · textwebappsjsp

https://www.exploit-db.com/exploits/40229

View Code ZIP pw:eip

metasploit WORKING POC EXCELLENT

rubypoclinux

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/webnms_file_upload.rb

View Code ZIP pw:eip

References (8)

[Exploit, Third Party Advisory] http://packetstormsecurity.com/files/138244/WebNMS-Framework-5.2-SP1-Traversal-Weak-Obfuscation-User-Impersonation.html

[Exploit, Mailing List] http://seclists.org/fulldisclosure/2016/Aug/54

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/92402

[Exploit, Technical Description, Third Party Advisory] https://blogs.securiteam.com/index.php/archives/2712

[Various Sources] https://forums.webnms.com/topic/recent-vulnerabilities-in-webnms-and-how-to-protect-the-server-against-them

[Exploit] https://github.com/pedrib/PoC/blob/master/advisories/webnms-5.2-sp1-pwn.txt

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/40229/

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/539159/100/0/threaded

Scores

CVSS v3 9.8

EPSS 0.9064

EPSS Percentile 99.6%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-22

Status published

Products (1)

zohocorp/webnms_framework 5.2 (2 CPE variants)

Published Jan 23, 2017

Tracked Since Feb 18, 2026