writeups.xyz / ManageEngine ServiceDesk Plus: Arbitrary File Upload

Submitter : c2a

Date: 3 March 2020

Bounty : undisclosed

Vulnerabilities :

• Arbitrary File Upload
• RCE

Programs :

• Undisclosed

Authors :

• Duc Anh Bui

Link :
https://medium.com/@ducanhbui/manageengine-servicedesk-plus-arbitrary-file-upload-4bab0bd00425