Full title: Oracle BeeHive 2 Arbitrary File Upload Exploit Category: remote exploits Platform: windows This Metasploit module exploits a vulnerability found in Oracle BeeHive. The prepareAudioToPlay method found in voice-servlet can be abused to write a malicious file onto the target machine, and gain remote arbitrary code execution under the context of SYSTEM. Authentication is not required to exploit this vulnerability. # 0day.today @ http://0day.today/