CVE-2008-0457

Unrestricted file upload vulnerability in the FileUpload class running on the Symantec LiveState Apache Tomcat server, as used by Symantec Backup Exec System Recovery Manager 7.0 and 7.0.1, allows remote attackers to upload and execute arbitrary JSP files via unknown vectors.

• CWE-20

• http://secunia.com/advisories/28787Vendor Advisory
• http://seer.entsupport.symantec.com/docs/297171.htmPatch
• http://www.securityfocus.com/archive/1/487688/100/0/threaded
• http://www.securityfocus.com/bid/27487Exploit
• http://www.securitytracker.com/id?1019303
• http://www.symantec.com/avcenter/security/Content/2008.02.04.htmlPatch
• http://www.vupen.com/english/advisories/2008/0413Vendor Advisory
• http://www.zerodayinitiative.com/advisories/ZDI-08-003.html
• https://www.exploit-db.com/exploits/5078
• http://secunia.com/advisories/28787Vendor Advisory
• http://seer.entsupport.symantec.com/docs/297171.htmPatch
• http://www.securityfocus.com/archive/1/487688/100/0/threaded
• http://www.securityfocus.com/bid/27487Exploit
• http://www.securitytracker.com/id?1019303
• http://www.symantec.com/avcenter/security/Content/2008.02.04.htmlPatch
• http://www.vupen.com/english/advisories/2008/0413Vendor Advisory
• http://www.zerodayinitiative.com/advisories/ZDI-08-003.html
• https://www.exploit-db.com/exploits/5078

Published

Feb 7, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-0451Multiple SQL injection vulnerabilities in PacerCMS 0.6 allow…
• CVE-2008-0452Directory traversal vulnerability in articles.php in Siteman…
• CVE-2008-0453SQL injection vulnerability in list.php in Easysitenetwork R…
• CVE-2008-0454Cross-zone scripting vulnerability in the Internet Explorer …
• CVE-2008-0455Cross-site scripting (XSS) vulnerability in the mod_negotiat…
• CVE-2008-0456CRLF injection vulnerability in the mod_negotiation module i…
• CVE-2008-0458Directory traversal vulnerability in function/sources.php in…
• CVE-2008-0459Directory traversal vulnerability in update/index.php in Liq…
• CVE-2008-0460Cross-site scripting (XSS) vulnerability in api.php in (1) M…
• CVE-2008-0461SQL injection vulnerability in index.php in the Search modul…
• CVE-2008-0462Cross-site scripting (XSS) vulnerability in the Archive 5.x …
• CVE-2008-0463Cross-site scripting (XSS) vulnerability in the Workflow 4.7…