$ cve CVE-2016-6600 JSON

CVE-2016-6600 EXPLOIT

9.8

CRITICAL · CVSS 3.0 · EPSS 90.6% (pctl 100)

Patch early

A public exploit exists.

Description

Directory traversal vulnerability in the file upload functionality in ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to upload and execute arbitrary JSP files via a .. (dot dot) in the fileName parameter to servlets/FileUploadServlet.

Scoring

CVSS	9.8 (CRITICAL, v3.0)
Vector	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS	90.55% — more likely to be exploited than 100% of all CVEs
Weakness	CWE-22
On CISA KEV	no
Public exploit	yes
Published	2017-01-23
Last modified	2026-06-17

Affected (1)

Vendor	Product
zohocorp	webnms framework

Public exploits

Source	Title	Date
exploit-db	WebNMS Framework Server 5.2/5.2 SP1 - Multiple Vulnerabilities	2016-08-10

References

http://packetstormsecurity.com/files/138244/WebNMS-Framework-5.2-SP1-Traversal-Weak-Obfuscation-User-Impersonation.html
http://seclists.org/fulldisclosure/2016/Aug/54
http://www.securityfocus.com/archive/1/539159/100/0/threaded
http://www.securityfocus.com/bid/92402
https://blogs.securiteam.com/index.php/archives/2712
https://forums.webnms.com/topic/recent-vulnerabilities-in-webnms-and-how-to-protect-the-server-against-them
https://github.com/pedrib/PoC/blob/master/advisories/webnms-5.2-sp1-pwn.txt
https://www.exploit-db.com/exploits/40229/
http://packetstormsecurity.com/files/138244/WebNMS-Framework-5.2-SP1-Traversal-Weak-Obfuscation-User-Impersonation.html
http://seclists.org/fulldisclosure/2016/Aug/54
http://www.securityfocus.com/archive/1/539159/100/0/threaded
http://www.securityfocus.com/bid/92402
https://blogs.securiteam.com/index.php/archives/2712
https://forums.webnms.com/topic/recent-vulnerabilities-in-webnms-and-how-to-protect-the-server-against-them
https://github.com/pedrib/PoC/blob/master/advisories/webnms-5.2-sp1-pwn.txt
https://www.exploit-db.com/exploits/40229/

→ the Explorer · watch your stack · NVD