JBoss 4.0.2 Cross Site Scripting

Exploit Title: Reflected XSS in jmx-console HtmlAdaptor DatabasePersistencePlugin parameter Date: 9th February 2017 Exploit Author: justpentest Vendor Homepage: http://jbossas.jboss.org/downloads/ Version: Jboss 4.0.2 Contact: [email protected] 1 Description: Jmx-console's...

JBoss Application Server Remote Exploit

No description provided by source. JBoss AS Remote Exploit by Kingcope use IO::Socket; use LWP::UserAgent; use URI::Escape; use MIME::Base64; sub usage print JBoss AS Remote Exploit\nby Kingcope\n\nusage: perl jboss.pl target targetport yourip yourport win/lnx\n; print example: perl daytona.pl...

Immunity Canvas: JBOSS_JMXCONSOLE_DEPLOYER

Name| jbossjmxconsoledeployer ---|--- CVE| CVE-2010-0738 Exploit Pack| CANVAS Description| jbossjmxconsoledeployer Notes| CVE Name: CVE-2010-0738 VENDOR: Red Hat Notes: JBoss Web JMX Console exposes services that can be used to deploy a new application. This exploit will try to deploy an...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in jmx-console/HtmlAdaptor in JBoss allows remote attackers to perform privileged actions as administrators via certain MBean operations, a different vulnerability than CVE-2006-3733...

CVE-2007-1157

Cross-site request forgery CSRF vulnerability in jmx-console/HtmlAdaptor in JBoss allows remote attackers to perform privileged actions as administrators via certain MBean operations, a different vulnerability than CVE-2006-3733...

CVE-2007-1157

Cross-site request forgery CSRF vulnerability in jmx-console/HtmlAdaptor in JBoss allows remote attackers to perform privileged actions as administrators via certain MBean operations, a different vulnerability than CVE-2006-3733...

CVE-2006-3733

jmx-console/HtmlAdaptor in the jmx-console in the JBoss web application server, as shipped with Cisco Security Monitoring, Analysis and Response System CS-MARS before 4.2.1, allows remote attackers to gain privileges as the CS-MARS administrator and execute arbitrary Java code via an invokeOp...