Xeams SQLRunner Derby hardcoded creds JSP RCE

Unauthenticated SQLRunner.jsp connects to embedded Derby with default credentials, SYSCSEXPORTQUERY writes JSP under webapps/ROOT, GET runs cmd. """Xeams SQLRunner.jsp unauthenticated Derby export → JSP webshell RCE.""" from future import annotations import random import re from urllib.parse impo...