{"vulnerability": "CVE-2014-5301", "sightings": [{"uuid": "6411396c-0cf8-4657-9853-be481af319fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-5301", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:41.000000Z"}, {"uuid": "2a50cccc-1b69-4403-b755-6ea2f0276fa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-5301", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:30.000000Z"}, {"uuid": "a6607496-fd0d-4a01-be7d-eb7701d691c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-5301", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/manageengine_auth_upload.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "6c689a8b-2a40-4f03-bd2b-4fe0166942f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2014-5301", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/35845", "content": "", "creation_timestamp": "2015-01-20T00:00:00.000000Z"}, {"uuid": "164db87e-a18c-4864-9330-6ac22daf3c45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-5301", "type": "seen", "source": "https://t.me/arpsyndicate/2305", "content": "#ExploitObserverAlert\n\nCVE-2014-5301\n\nDESCRIPTION: Exploit Observer has 10 entries related to CVE-2014-5301. Directory traversal vulnerability in ServiceDesk Plus MSP v5 to v9.0 v9030; AssetExplorer v4 to v6.1; SupportCenter v5 to v7.9; IT360 v8 to v10.4.\n\nFIRST-EPSS: 0.970950000\nNVD-IS: 5.9\nNVD-ES: 2.8", "creation_timestamp": "2024-01-01T06:46:34.000000Z"}, {"uuid": "47a865a3-4333-4919-b7eb-6d1fec68d4e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-5301", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/manageengine_auth_upload.rb", "content": "{\"aliases\": [], \"arch\": \"java\", \"author\": [\"Pedro Ribeiro \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a directory traversal vulnerability in ManageEngine ServiceDesk,\\n          AssetExplorer, SupportCenter and IT360 when uploading attachment files. The JSP that accepts\\n          the upload does not handle correctly '../' sequences, which can be abused to write\\n          to the file system. Authentication is needed to exploit this vulnerability, but this module\\n          will attempt to login using the default credentials for the administrator and guest\\n          accounts. Alternatively, you can provide a pre-authenticated cookie or a username / password.\\n          For IT360 targets, enter the RPORT of the ServiceDesk instance (usually 8400). All\\n          versions of ServiceDesk prior v9 build 9031 (including MSP but excluding v4), AssetExplorer,\\n          SupportCenter and IT360 (including MSP) are vulnerable. At the time of release of this\\n          module, only ServiceDesk v9 has been fixed in build 9031 and above. This module has\\n          been tested successfully in Windows and Linux on several versions.\", \"disclosure_date\": \"2014-12-15\", \"fullname\": \"exploit/multi/http/manageengine_auth_upload\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:57:58 +0000\", \"name\": \"ManageEngine Multiple Products Authenticated File Upload\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/http/manageengine_auth_upload.rb\", \"platform\": \"Java\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"multi/http/manageengine_auth_upload\", \"references\": [\"CVE-2014-5301\", \"OSVDB-116733\", \"URL-https://seclists.org/fulldisclosure/2015/Jan/5\"], \"rport\": 8080, \"session_types\": false, \"targets\": [\"Automatic\", \"ServiceDesk Plus v5-v7.1 < b7016/AssetExplorer v4/SupportCenter v5-v7.9\", \"ServiceDesk Plus/Plus MSP v7.1 >= b7016 - v9.0 < b9031/AssetExplorer v5-v6.1\", \"IT360 v8-v10.4\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:01.694965Z"}]}