CVEs-PoC/2020/CVE-2020-14008.md

CVE-2020-14008

Description

Zoho ManageEngine Applications Manager 14710 and before allows an authenticated admin user to upload a vulnerable jar in a specific location, which leads to remote code execution.

POC

Reference

• http://packetstormsecurity.com/files/159066/ManageEngine-Applications-Manager-Authenticated-Remote-Code-Execution.html
• https://www.manageengine.com

Github

• https://github.com/404notf0und/CVE-Flow
• https://github.com/ARPSyndicate/cvemon