I found a Java based web application[1] running on the University of
Mauritius webserver. The application is currently in public view and allows
anyone from the Internet to modify, delete or add resources.
Someone with an Internet access could thus upload malicious code on the
webserver and remotely execute it.
I thus trigger it as a vulnerability. If it's not, I apologize for
triggering a false alarm, if it is, you can thank me later.