writeups.xyz / Pwning ManageEngine — From PoC to Exploit: A deep dive into CVE-2020–11531 and CVE-2020–11532

Submitter : c2a

Date: 28 June 2022

Bounty : undisclosed

Vulnerabilities :

• Path Traversal
• RCE
• Authentication Bypass

Programs :

• Zoho

Authors :

• Erik Wynter (@WynterErik)

Link :
https://medium.com/@erik.wynter/pwning-manageengine-from-poc-to-exploit-cfe5adb8c175