CVE-2017-14123 | BDVDB-2026-89901 Detail

Description#

Zoho ManageEngine Firewall Analyzer 12200 has an unrestricted File Upload vulnerability in the "Group Chat" section. Any user can upload files with any extensions. By uploading a PHP file to the server, an attacker can cause it to execute in the server context, as demonstrated by /itplus/FileStorage/302/shell.jsp.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12017-09-04Record published in the CVE List.
2. Version 22024-08-05Most recent update recorded in the CVE List.