1. opensymphony
  2. webwork

Source

webwork / lib / core / commons-fileupload.jar