Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory Traversal vulnerability ZDBQAREFSUBDIR parameter in /zropusermgmt API in Zoho ManageEngine Analytics Plus before 4350 allows remote attackers to run arbitrary code.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ZOHO ManageEngine Analytics Plus 路径遍历漏洞
Vulnerability Description
ZOHO ManageEngine Analytics Plus是印度ZOHO公司的一种自助式 IT 分析解决方案。可使用丰富的可视化和仪表板更好地查看您的 IT 数据。 ZOHO ManageEngine Analytics Plus 4350之前版本存在安全漏洞，该漏洞源于 /zropusermgmt API 中存在目录遍历漏洞。攻击者利用该漏洞操作 ZDBQAREFSUBDIR 参数执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A