Adobe RoboHelp Server 8 Arbitrary File Upload and Execute

vendor:

Adobe RoboHelp Server

by:

7.5

CVSS

HIGH

Authentication Bypass

287

CWE

Product Name: Adobe RoboHelp Server

Affected Version From: Unknown

Affected Version To: Unknown

Patch Exists: NO

Related CWE: CVE-2009-3068

CPE: a:adobe:robohelp_server:8

Metasploit:

Other Scripts:

Platforms Tested: Windows

2009

This module exploits an authentication bypass vulnerability which allows remote attackers to upload and execute arbitrary code.

Apply the patch provided by Adobe.

Source