Back to directory

WRITEUP #2418

(ZOHO) Manage Engine Desktop Central – SQL Injection / Arbitrary File Write

SQL InjectionArbitrary file writePath traversal

by@tde_sec(Tom Ellson)

Program

Zoho

Published

Aug 2, 2022

Added to HackDex

Sep 15, 2022

Read Full Writeuphttps://labs.jumpsec.com/zoho-manage-engine-desktop-central-sql-injection-arbitrary-file-write/

▸ RELATED WRITEUPS

Directory Traversal, SQL Injection and Server-Side Request Forgery

SQL InjectionPath traversal

Zero-Click Calendar invite — Critical zero-click vulnerability chain in macOS

RCEArbitrary file write

Breaking Down Barriers: Exploiting Pre-Auth SQL Injection In WhatsUp Gold - CVE-2024-6670

SQL InjectionReverse engineering

Bypassing airport security via SQL injection

Traccar 5 Remote Code Execution Vulnerabilities

RCEUnrestricted file upload

Built with ❤️ by Shubham Rawat