Java-Servlets-Shell

Java Servlets Shell Backdoor de Java Servlets inspirado en https://www.redteam-pentesting.de/files/redteam-jboss.tar.gz Nota : Los WAR contienen código Java compilado en lugar de páginas JSP para poder utilizarse en entornos que bloquean o no compilan archivos JSP...

CVE-2019-9616

An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx files does not consider for example file.jsp::$DATA to the admin/ueditor/uploadScrawl URI...

CVE-2019-9613

An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx files does not consider for example file.jsp::$DATA to the admin/ueditor/uploadVideo URI...