Intrusion Prevention

Project.Pier.Arbitrary.File.Upload

Description

This indicates an attack attempt against an arbitrary File Upload vulnerability in Project Pier.
The vulnerability is caused by an error when the vulnerable software handles a malicious HTTP request with a crafted URI. It allows a remote attacker to upload an arbitrary file via sending a crafted URI to a vulnerable application.

Affected Products

ProjectPier 0.8.8

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Currently we are unaware of any vendor supplied patch for this issue.