漏洞描述 ZOHO ManageEngine DesktopCentral(DC)是美国卓豪(ZOHO)公司的一套桌面管理解决方案。该方案包含软件分发、补丁管理、系统配置、远程控制等功能模块,可对桌面机以及服务器管理的整个生命周期提供支持。ZOHOManageEngine Desktop Central10.0.474之前版本中存在代码问题漏洞。该漏洞源于网络系统或产品的代码开发过程中存在设计或实现不当的问题。
相关漏洞推荐 (CVE-2023-53878)Member Login Script 3.3客户端去同步漏洞 POC CVE-2021-37415: Zoho ManageEngine ServiceDesk Plus - Authentication Bypass POC CVE-2023-23897: Ozette Plugins - Cross-Site Request Forgery POC wp-woocommerce-admin-fpd: WordPress Plugin WooCommerce Admin (woocommerce-admin) Full Path Disclosure POC CVE-2017-5983: JIRA Workflow Designer Plugin in Atlassian JIRA Server > 6.3.0 - Remote Code Execution (XXE) POC CVE-2021-4449: ZoomSounds Plugin - Unauthenticated Arbitrary File Upload POC CVE-2023-38875: PHP Login System 2.0.1 - Cross-Site Scripting POC CVE-2023-5815: News & Blog Designer Pack – WordPress Blog Plugin <= 3.4.1 - Unauthenticated Local File Inclusion POC nginx-status-403-bypass: Nginx Status Page - 403 Bypass POC CVE-2022-29081: Zoho ManageEngine - Access Control Bypass POC CVE-2021-4449: ZoomSounds Plugin - Unauthenticated Arbitrary File Upload POC CVE-2021-4374: WordPress Automatic Plugin - Unauthenticated Options Change POC CVE-2025-11749: WordPress AI Engine Plugin - Token Exposure