CVE-2013-3520

Public PoC / Exploit (1)

Exploit-DBVMware vCenter - Chargeback Manager ImageUploadServlet Arbitrary File Upload (Metasploit)

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

VMware vCenter Chargeback Manager (aka CBM) before 2.5.1 does not proper handle uploads, which allows remote attackers to execute arbitrary code via unspecified vectors.

Weaknesses (CWE)

CWE-94

Affected Products (7)

vmware · vcenter_chargeback_managervulnerable

References (2)

http://www.vmware.com/security/advisories/VMSA-2013-0008.html

Vendor Advisory

http://www.vmware.com/security/advisories/VMSA-2013-0008.html

Vendor Advisory