CVE-2008-1230 Unrestricted file upload vulnerability in JSPWiki 2.4.104 and 2.5.139 allows remote attackers to upload and execute arbitrary .jsp files via an unspecified manipulation that attaches a .jsp file to an...
HighCVSS 9.3
EPSS 4.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Unrestricted file upload vulnerability in JSPWiki 2.4.104 and 2.5.139 allows remote attackers to upload and execute arbitrary .jsp files via an unspecified manipulation that attaches a .jsp file to an "entry page."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jspwiki | = 2.4.104 | No fix listed |
| jspwiki | = 2.5.139 | No fix listed |
| jspwiki | = 2.5.139_beta | No fix listed |
References
- 20080213 JSPWiki Multiple Vulnerabilities exploit mailing-list
- 28969 third-party-advisory vendor-advisory
- www.bugsec.com
- 27785 exploit vdb-entry
- jspwiki-install-file-upload(40511) vdb-entry
- 5112 exploit