cve/2022/CVE-2022-28219.md

CVE-2022-28219

Description

Cewolf in Zoho ManageEngine ADAudit Plus before 7060 is vulnerable to an unauthenticated XXE attack that leads to Remote Code Execution.

POC

Reference

• http://packetstormsecurity.com/files/167997/ManageEngine-ADAudit-Plus-Path-Traversal-XML-Injection.html
• https://www.horizon3.ai/red-team-blog-cve-2022-28219/
• https://www.manageengine.com/products/active-directory-audit/cve-2022-28219.html

Github

• https://github.com/A0RX/Red-Blueteam-party
• https://github.com/A0RX/Redblueteamparty
• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/NaInSec/CVE-PoC-in-GitHub
• https://github.com/SYRTI/POC_to_review
• https://github.com/WhooAmii/POC_to_review
• https://github.com/aeifkz/CVE-2022-28219-Like
• https://github.com/horizon3ai/CVE-2022-28219
• https://github.com/k0mi-tg/CVE-POC
• https://github.com/kas0n/RedTeam-Articles
• https://github.com/manas3c/CVE-POC
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/nvn1729/advisories
• https://github.com/rbowes-r7/manageengine-auditad-cve-2022-28219
• https://github.com/trhacknon/Pocingit
• https://github.com/whoforget/CVE-POC
• https://github.com/youwizard/CVE-POC
• https://github.com/zecool/cve