ManageEngine ServiceDesk任意文件下载漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.cnvd.org.cn/flaw/show/CNVD-2017-36383
• https://cve.circl.lu/vuln/cve-2017-11511
• https://vulnerability.circl.lu/vuln/cnvd-2017-36392
• https://avd.aliyun.com/detail?id=AVD-2011-2755
• https://www.clouddefense.ai/cve/2017/CVE-2017-11511
• https://www.threatquarters.com/cves/CVE-2017-11512

Related Vulnerabilities

• BMC FootPrints /footprints/servicedesk/passwordreset/request/ 权限绕过漏洞（CVE-2025-71257/CVE-2025-71258/CVE-2025-71259/CVE-2025-71260）
• PoCCVE-2022-28987: Zoho ManageEngine ADSelfService Plus 6121 - Username Enumeration
• PoCCVE-2022-36923: Zoho ManageEngine - getUserAPIKey Authentication Bypass
• PoCCVE-2021-37415: Zoho ManageEngine ServiceDesk Plus - Authentication Bypass
• PoCCVE-2022-29081: Zoho ManageEngine - Access Control Bypass
• PoCCVE-2012-4889: ManageEngine Firewall Analyzer 7.2 - Cross-Site Scripting
• PoCCVE-2015-7780: ManageEngine Firewall Analyzer <8.0 - Local File Inclusion
• PoCCVE-2017-11512: ManageEngine ServiceDesk 9.3.9328 - Arbitrary File Retrieval
• PoCCVE-2018-12998: Zoho manageengine - Cross-Site Scripting
• PoCCVE-2018-17283: Zoho ManageEngine OpManager - SQL Injection
• PoCCVE-2020-10189: ManageEngine Desktop Central Java Deserialization
• PoCCVE-2020-12116: Zoho ManageEngine OpManger - Arbitrary File Read
• PoCCVE-2021-37416: Zoho ManageEngine ADSelfService Plus <=6103 - Cross-Site Scripting