diff --git a/ActiveMQ/CVE-2016-3088/CVE-2016-3088.gif b/ActiveMQ/CVE-2016-3088/CVE-2016-3088.gif new file mode 100644 index 0000000..2d18fb2 Binary files /dev/null and b/ActiveMQ/CVE-2016-3088/CVE-2016-3088.gif differ diff --git a/ActiveMQ/CVE-2016-3088/README.md b/ActiveMQ/CVE-2016-3088/README.md new file mode 100644 index 0000000..9683d97 --- /dev/null +++ b/ActiveMQ/CVE-2016-3088/README.md @@ -0,0 +1,11 @@ +# CVE-2016-3088 ActiveMQ Arbitrary File Write Vulnerability + +The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request. Therefore, we can write a file and then move it to any directory, thereby causing arbitrary file writing vulnerability. + +Affected version: Apache ActiveMQ 5.x - 5.13.x + +FOFA query rule: app="Apache-ActiveMQ" + +# Demo + +![](CVE-2016-3088.gif) \ No newline at end of file