CVE-2014-5362

The admin interface in Landesk Management Suite 9.6 and earlier allows remote attackers to conduct remote file inclusion attacks involving ASPX pages from third-party sites via the d parameter to (1) ldms/sm_actionfrm.asp or (2) remote/frm_coremainfrm.aspx; or the (3) top parameter to remote/frm_splitfrm.aspx.

• CWE-20

• http://packetstormsecurity.com/files/131496/Landesk-Management-Suite-9.5-RFI-CSRF.htmlExploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/535286/100/1100/threaded
• http://www.securityfocus.com/bid/74190Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1032203Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/131496/Landesk-Management-Suite-9.5-RFI-CSRF.htmlExploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/535286/100/1100/threaded
• http://www.securityfocus.com/bid/74190Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1032203Third Party Advisory, VDB Entry

Published

Sep 19, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-5354plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in MIT Kerber…
• CVE-2014-5355MIT Kerberos 5 (aka krb5) through 1.13.1 incorrectly expects…
• CVE-2014-5356OpenStack Image Registry and Delivery Service (Glance) befor…
• CVE-2014-5359Directory traversal vulnerability in SafeNet Authentication …
• CVE-2014-5360Cross-site scripting (XSS) vulnerability in the admin interf…
• CVE-2014-5361Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2014-5367Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-5368Directory traversal vulnerability in the file_get_contents f…
• CVE-2014-5369Enigmail 1.7.x before 1.7.2 sends emails in plaintext when e…
• CVE-2014-5370Directory traversal vulnerability in the CFChart servlet (co…
• CVE-2014-5375The server in Adaptive Computing Moab before 7.2.9 and 8 bef…
• CVE-2014-5376Adaptive Computing Moab before 7.2.9 and 8 before 8.0.0, whe…