漏洞描述
ManageEngine是专业研发和销售IT管理软件、网管软件的品牌，逐步改变了企业级IT运维管理方法。该漏洞是由于Zoho ManageEngineOnPremise产品中引用了过时的第三方依赖库ApacheSantuario导致，若启用或曾经启用过SAML单点登录，未经授权的远程攻击者成功利用此漏洞可在目标服务器上执行任意代码。
Zoho ManageEngineSAMLSamlResponseServlet 存在任意代码执行漏洞(CVE-2022-47966)
PoC代码
暂无相关漏洞推荐
- （CVE-2023-53878）Member Login Script 3.3客户端去同步漏洞
- POC CVE-2021-37415: Zoho ManageEngine ServiceDesk Plus - Authentication Bypass
- POC CVE-2023-23897: Ozette Plugins - Cross-Site Request Forgery
- POC wp-woocommerce-admin-fpd: WordPress Plugin WooCommerce Admin (woocommerce-admin) Full Path Disclosure
- POC CVE-2017-5983: JIRA Workflow Designer Plugin in Atlassian JIRA Server > 6.3.0 - Remote Code Execution (XXE)
- POC CVE-2021-4449: ZoomSounds Plugin - Unauthenticated Arbitrary File Upload
- POC CVE-2023-38875: PHP Login System 2.0.1 - Cross-Site Scripting
- POC CVE-2023-5815: News & Blog Designer Pack – WordPress Blog Plugin <= 3.4.1 - Unauthenticated Local File Inclusion
- POC nginx-status-403-bypass: Nginx Status Page - 403 Bypass
- POC CVE-2022-29081: Zoho ManageEngine - Access Control Bypass
- POC CVE-2021-4449: ZoomSounds Plugin - Unauthenticated Arbitrary File Upload
- POC CVE-2021-4374: WordPress Automatic Plugin - Unauthenticated Options Change
- POC CVE-2025-11749: WordPress AI Engine Plugin - Token Exposure