medium5.0Public exploit code
CVE-2011-2755
Directory traversal vulnerability in FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0 before Build 8012 allows remote attackers to read arbitrary files vi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ManageEngine Support Center Plus 7.8 Build 7801 - Directory Traversal2011-06-23 · webapps · jsp · Verified
- ManageEngine ServiceDesk Plus 8.0 - Directory Traversal2011-06-23 · webapps · jsp · Verified
- ManageEngine ServiceDesk 8.0.0.12 - Database Disclosure2011-07-07 · webapps · jsp
Impact
Directory traversal vulnerability in FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0 before Build 8012 allows remote attackers to read arbitrary files via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Manageengine | Servicedesk Plus | Version 8.0 |