CVE-2016-0709

## # This module requires Metasploit: metasploitcom/download # Current source: githubcom/rapid7/metasploit-framework ## class MetasploitModule < Msf::Exploit::Remote Rank = ManualRanking include Msf::Exploit::Remote::HttpClient include Msf::Exploit::FileDropper def initialize(info = {}) super(update_info(info, ...

This Metasploit module exploits the unsecured User Manager REST API and a ZIP file path traversal in Apache Jetspeed-2, versions 230 and unknown earlier versions, to upload and execute a shell Note: this exploit will create, use, and then delete a new admin user Warning: in testing, exploiting the file upload clobbered the web interface beyond ...