3d2c0acf_curity_Updates___Core_Security__Description
[Released Date] 07.01.2015 [Title] Zimbra Collaboration Server skin Local File Include Exploit [Vulnerabilty] CVE-2013-7091 [Category] Exploits/Remote [Platform] Linux [Description] 
Zimbra is vulnerable to a Local File Inclusion vulnerability that allows attacker to get LDAP credentials which we may use for upload a JSP file allowing us to install an agent.
Core Impact Pro Exploits and Security Updates | Core Security