CVEs-PoC/2014/CVE-2014-6038.md

CVE-2014-6038

Description

Zoho ManageEngine EventLog Analyzer versions 7 through 9.9 build 9002 have a database Information Disclosure Vulnerability. Fixed in EventLog Analyzer 10.0 Build 10000.

POC

Reference

• http://packetstormsecurity.com/files/128996/ManageEngine-EventLog-Analyzer-SQL-Credential-Disclosure.html
• http://packetstormsecurity.com/files/128996/ManageEngine-EventLog-Analyzer-SQL-Credential-Disclosure.html
• http://seclists.org/fulldisclosure/2014/Nov/12
• http://seclists.org/fulldisclosure/2014/Nov/12

Github

No PoCs found on GitHub currently.