Description
Unrestricted file upload vulnerability in modules/emoticons.php in Jupiter CMS 1.1.5 allows remote attackers to upload arbitrary files by modifying the HTTP request to send an image content type, and to omit is_guest and is_user parameters. NOTE: this issue might be related to CVE-2006-4875.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- Jupiter CMS 1.1.5 - Arbitrary File Upload EDB-3311 · webapps · Feb 14, 2007 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- http://mgsdl.free.fr/advisories/12070214.txt
- 22560 vdb-entry
- 3311 exploit
- 20070214 Jupiter CMS 1.1.5 Multiple Vulnerabilities mailing-list
- jupitercm-emoticons-file-upload(32517) vdb-entry
- 20070214 Re: Jupiter CMS 1.1.5 Multiple Vulnerabilities mailing-list
- 33728 vdb-entry
- http://www.acid-root.new.fr/advisories/12070214.txt