Sploitus

CVE-2020-5752

12 known exploits for CVE-2020-5752

Relative path traversal in Druva inSync Windows Client 6.6.3 allows a local, unauthenticated attacker to execute arbitrary operating system commands with SYSTEM privileges.

Affected products
Druva Insync Windows Client
Druva Insync Client
= 6.6.3
CVSS 3.1
7.8 HIGH
EPSS
8.6% (95th percentile)
Weakness
CWE-22
NVD status
Modified
Published
2020-05-21
CVE-2020-5752 at NVD
Authoritative description, scoring and affected products

12 known exploits for CVE-2020-5752

Proof-of-concept code and exploit modules indexed by Sploitus

CVE-2020-5752
2026-08-28 KitPloitKITPLOIT
CVE-2020-5752-Druva-inSync-Windows-Client-6.6.3---Local-Privilege-Escalation-PowerShell-
2026-08-28 KitPloitKITPLOIT
Exploit for Path Traversal in Druva Insync_Client
2026-01-13 x0rbeexdGITHUB
Druva inSync Windows Client 6.6.3 Privilege Escalation
2020-12-08 Matteo MalvicaPACKETSTORM
Druva inSync Windows Client 6.6.3 - Local Privilege Escalation (PowerShell) Exploit
2020-12-07 1F98DZDT
Druva inSync Windows Client 6.6.3 - Local Privilege Escalation (PowerShell)
2020-12-07 1F98DEXPLOITDB
Synology DiskStation Manager smart.cgi - Remote Command Execution
2020-05-25 0daydb.comUNKNOWNRuby
Druva inSync Windows Client 6.6.3 CVE-2020-5752 - Local Privilege Escalation
2020-05-25 0daydb.comUNKNOWNPython
Gym Management System 1.0 - Remote Code Execution
2020-05-25 0daydb.comUNKNOWNPHP
Druva inSync Windows Client 6.6.3 - Local Privilege Escalation Exploit
2020-05-22 Matteo MalvicaZDTPython
Druva inSync Windows Client 6.6.3 - Local Privilege Escalation
2020-05-22 Matteo MalvicaEXPLOITDBPython
Druva inSync Windows Client 6.6.3 Local Privilege Escalation
2020-05-22 Matteo MalvicaPACKETSTORMPython