Lucene search
+L

1 matches found

0day.today
0day.today
added 2023/08/16 12:0 a.m.561 views

H2 Database Web Interface Create Alias Remote Code Execution Exploit

The H2 database contains an alias function which allows for arbitrary Java code to be used. This functionality can be abused to create an exec functionality to pull our payload down and execute it. H2's web interface contains restricts MANY characters, so injecting a payload directly is not...

7.4AI score
SaveExploits0
Rows per page
Query Builder