st2-048

St2-048 원격 코드 실행 취약점 Apache Struts 2 Struts 2.3.x 시리즈의 Struts 1 플러그인 예제에 있는 Struts Showcase 앱에서 발생 가능한 RCE http://struts.apache.org/docs/s2-048.html https://cwiki.apache.org/confluence/display/WW/S2-048 사용법: python St2-048.py set url : http://xx.xx.xx.xx:port/integration/saveGangster.action cmd :...

The vulnerability of the Apache Struts Showcase application on the Apache Struts software platform allows a attacker to execute arbitrary OGNL code.

The vulnerability of the Apache Struts Showcase application on the Apache Struts software platform is related to improper code generation. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary OGNL code using a specially created parameter name...

Apache Struts 2 - Struts 1 Plugin Showcase OGNL Code Execution Exploit

Exploit for multiple platform in category remote exploits This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Apache Struts 2 Struts 1 Plugin Showcase OGNL Code Execution', 'Description' = %q This...

CVE-2013-1965: Improper Control of Generation of Code

Apache Struts Showcase App 2.0.0 through 2.3.13, as used in Struts 2 before 2.3.14.3, allows remote attackers to execute arbitrary OGNL code via a crafted parameter name that is not properly handled when invoking a redirect...