{"uuid": "9e50a30b-974d-4586-9c10-b6affa2b2420", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-6037", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/eventlog_file_upload.rb", "content": "{\"aliases\": [], \"arch\": \"java, x86\", \"author\": [\"h0ng10\", \"Pedro Ribeiro \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a file upload vulnerability in ManageEngine Eventlog Analyzer.\\n          The vulnerability exists in the agentUpload servlet which accepts unauthenticated\\n          file uploads and handles zip file contents in an insecure way. By combining both\\n          weaknesses a remote attacker can achieve remote code execution. This module has been\\n          tested successfully on versions v7.0 - v9.9 b9002 in Windows and Linux. Versions\\n          between 7.0 and < 8.1 are only exploitable via EAR deployment in the JBoss server,\\n          while versions 8.1+ are only exploitable via a JSP upload.\", \"disclosure_date\": \"2014-08-31\", \"fullname\": \"exploit/multi/http/eventlog_file_upload\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:57:58 +0000\", \"name\": \"ManageEngine Eventlog Analyzer Arbitrary File Upload\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/http/eventlog_file_upload.rb\", \"platform\": \"Java,Linux,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/eventlog_file_upload\", \"references\": [\"CVE-2014-6037\", \"OSVDB-110642\", \"URL-https://www.mogwaisecurity.de/advisories/MSA-2014-01.txt\", \"URL-https://seclists.org/fulldisclosure/2014/Aug/86\"], \"rport\": 8400, \"session_types\": false, \"targets\": [\"Automatic\", \"Eventlog Analyzer v7.0 - v8.0 / Java universal\", \"Eventlog Analyzer v8.1 - v9.9 b9002 / Windows\", \"Eventlog Analyzer v8.1 - v9.9 b9002 / Linux\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:46.499289Z"}