CVE-2013-1081

Directory traversal vulnerability in MDM.php in Novell ZENworks Mobile Management (ZMM) 2.6.1 and 2.7.0 allows remote attackers to include and execute arbitrary local files via the language parameter.

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

68.08% chance of exploitation in the next 30 days, 99th percentile

Published

2013-03-11

Updated

2024-09-16

Proof-of-concept exploits (1)

• steponequit/CVE-2013-10812★ · 2013-06-04

Metasploit modules (2)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/novell_mdm_lfi.rb
• rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/novell_mdm_creds.rb

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/26012

References

• CVE Record
• NVD entry