Contributors and admins can upload some new page templates. These templates can contain Java code which will be executed by the server when requested via a browser.
In "Gestion des modèles de page", click on "Ajouter". You'll reach the page "Fiche de création d'un modèle de page". Here, select the JSP file that you want to upload (for example "cmdjsp.jsp" from http://michaeldaw.org/projects/wbc-v1b.tar.gz
) in field "Image " and fill the two others fields. After validation, the uploaded JSP file is reachable at /images/admin/page_templates/cmdjsp.jsp.
The following URL will display the result of the "ipconfig" command :
/images/admin/page_templates/cmdjsp.jsp?cmd=ipconfig
Impact is large mainly when Lutece is deployed on some shared/hosted servers where Lutece contributors haven't sysadmins privileges.