{"uuid": "c10f14c8-f504-4b0e-b8cd-81c71fa84422", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-8516", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/visual_mining_netcharts_upload.rb", "content": "{\"aliases\": [], \"arch\": \"java\", \"author\": [\"sghctoma\", \"juan vazquez \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits multiple vulnerabilities in Visual Mining NetCharts.\\n          First, a lack of input validation in the administration console permits\\n          arbitrary jsp code upload to locations accessible later through the web\\n          service. Authentication is typically required, however a 'hidden' user is\\n          available by default (and non-editable). This user, named 'Scheduler',\\n          can only login to the console after any modification in the user\\n          database (a user is added, admin password is changed etc). If the\\n          'Scheduler' user isn't available valid credentials must be supplied. The\\n          default Admin password is Admin.\", \"disclosure_date\": \"2014-11-03\", \"fullname\": \"exploit/multi/http/visual_mining_netcharts_upload\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:04 +0000\", \"name\": \"Visual Mining NetCharts Server Remote Code Execution\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/http/visual_mining_netcharts_upload.rb\", \"platform\": \"Linux,Windows\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"multi/http/visual_mining_netcharts_upload\", \"references\": [\"CVE-2014-8516\", \"ZDI-14-372\"], \"rport\": 8001, \"session_types\": false, \"targets\": [\"Visual Mining NetCharts Server 7.0\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:18.695473Z"}