ClipBucket beats_uploader Unauthenticated Arbitrary File Upload
Posted by deepcore on March 28, 2018 – 3:13 am
This Metasploit module exploits a vulnerability found in ClipBucket versions before 4.0.0 (Release 4902). A malicious file can be uploaded using an unauthenticated arbitrary file upload vulnerability. It is possible for an attacker to upload a malicious script to issue operating system commands. This issue is caused by improper session handling in /action/beats_uploader.php file. This Metasploit module was tested on ClipBucket before 4.0.0 – Release 4902 on Windows 7 and Kali Linux.
Post a reply
You must be logged in to post a comment.