Qbao

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADManager Plus versions 7110 and prior Description: The issue allows for unrestricted file upload, which can lead to remote code execution. Recommendations: For Zoho ManageEngine ADManager Plus versions 7110 and prior, update to a version later than 7110 to resolve the issue. As a temporary workaround, consider restricting file upload capabilities to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADManager Plus versions prior to 7110 Description: The issue allows for unrestricted file upload, which can lead to remote code execution. Recommendations: For Zoho ManageEngine ADManager Plus versions prior to 7110, update to a version later than 7110 to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADManager Plus versions 7110 and prior Description: The issue allows for path traversal, enabling the copying of files from one directory to another. Recommendations: For Zoho ManageEngine ADManager Plus versions 7110 and prior, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADManager Plus versions 7110 and prior Description: The issue allows for unrestricted file upload, which can lead to remote code execution. Recommendations: For Zoho ManageEngine ADManager Plus versions 7110 and prior, update to a version later than 7110 to resolve the issue. As a temporary workaround, consider restricting file upload capabilities to minimize the risk of exploitation.