Java-Servlets-Shell

Java 서블릿 셸 https://www.redteam-pentesting.de/files/redteam-jboss.tar.gz 에서 영감을 받은 Java 서블릿 백도어 참고 : WAR에는 JSP 파일을 차단하거나 컴파일하지 않는 환경에서 사용할 수 있도록 JSP 페이지 대신 컴파일된 Java 코드가 포함되어 있습니다...

CVE-2019-9616

An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx files does not consider for example file.jsp::$DATA to the admin/ueditor/uploadScrawl URI...

CVE-2019-9613

An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx files does not consider for example file.jsp::$DATA to the admin/ueditor/uploadVideo URI...