CVE-2009-3068
Adobe RoboHelp Server 8 - Unauthenticated Arbitrary File Upload and Remote Code Execution via JSP File Upload
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2009-3068.
PoCs published by Metasploit, Intevydis, MC, including Metasploit module exploits/windows/http/adobe_robohelper_authbypass.
AI-analyzed exploit summary This Metasploit module exploits an authentication bypass vulnerability in Adobe RoboHelp Server 8, allowing arbitrary file upload and execution via a crafted POST request. It uploads a JSP payload and triggers execution via a subsequent GET request.
Description
Unrestricted file upload vulnerability in the RoboHelpServer Servlet (robohelp/server) in Adobe RoboHelp Server 8 allows remote attackers to execute arbitrary code by uploading a Java Archive (.jsp) file during a PUBLISH action, then accessing it via a direct request to the file in the robohelp/robo/reserved/web directory under its sessionid subdirectory, as demonstrated by the vd_adobe module in VulnDisco Pack Professional 8.7 through 8.11.
Exploits (3)
This Metasploit module exploits an authentication bypass vulnerability in Adobe RoboHelp Server 8, allowing arbitrary file upload and execution via a crafted POST request. It uploads a JSP payload and triggers execution via a subsequent GET request.
This exploit bypasses authentication in Adobe RoboHelp Server 8.0 by sending a crafted multipart/form-data POST request to upload a malicious JSP file. The attacker then executes the JSP file using a session ID retrieved from the server's response.
This Metasploit module exploits an authentication bypass vulnerability in Adobe RoboHelp Server 8, allowing arbitrary file upload and execution via a maliciously crafted multipart POST request. The exploit uploads a JSP file containing a Java payload and triggers its execution by accessing the uploaded file.