CVE-2009-3068

This Metasploit module exploits an authentication bypass vulnerability in Adobe RoboHelp Server 8, allowing arbitrary file upload and execution via a crafted POST request. It uploads a JSP payload and triggers execution via a subsequent GET request.

This exploit bypasses authentication in Adobe RoboHelp Server 8.0 by sending a crafted multipart/form-data POST request to upload a malicious JSP file. The attacker then executes the JSP file using a session ID retrieved from the server's response.

This Metasploit module exploits an authentication bypass vulnerability in Adobe RoboHelp Server 8, allowing arbitrary file upload and execution via a maliciously crafted multipart POST request. The exploit uploads a JSP file containing a Java payload and triggers its execution by accessing the uploaded file.