It's possible to upload JSP page to server.
vulners.com/securityvulns/securityvulns:doc:23352
vulners.com/securityvulns/securityvulns:doc:23353