CVE-2018-9206 - Blueimp jQuery-File-Upload - Unrestricted File Upload 💰 #14587
Description
Description:
Blueimp jQuery-File-Upload <= v9.22.0 contains an unauthenticated arbitrary file upload caused by insufficient validation in the upload component, letting remote attackers upload malicious files, exploit requires no authentication.
Severity: Critical
POC:
- http://www.vapidlabs.com/advisory.php?v=204
- https://wpvulndb.com/vulnerabilities/9136
- https://www.exploit-db.com/exploits/45790/
- https://www.exploit-db.com/exploits/46182/
- https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/jquery_file_upload.rb
- https://github.com/liemkaka/CVE-2018-9206
- https://vulncheck.com/xdb/157694709091
- https://github.com/MikeyPPPPPPPP/CVE-2018-9206
- https///github.com:MikeyPPPPPPPP/CVE-2018-9206.git
- https://github.com/mi-hood/CVE-2018-9206
- https://github.com/cved-sources/cve-2018-9206
- https://vulncheck.com/xdb/686936ca9734
- https://github.com/Stahlz/JQShell
- https///github.com:Stahlz/JQShell.git
- https://github.com/Den1al/CVE-2018-9206
KEV: True
Shodan Query: NA
Acceptance Criteria: The template must include a complete POC and should not rely solely on version-based detection. Contributors are required to provide debug data(
-debug) along with the template to help the triage team with validation or can also share a vulnerable environment like docker file.
Rewards will only be given once the template is fully validated by the team. Templates that are incomplete or invalid will not be accepted. Avoid adding code templates for CVEs that can be achieved using HTTP, TCP, or JavaScript. Such templates are blocked by default and won’t produce results, so we prioritize creating templates with other protocols unless exceptions are made.
You can check the FAQ for the Nuclei Templates Community Rewards Program here.