Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2015-2912 PoC — Orient OrientDB Server Community Edition Studio组件跨站请求伪造漏洞

Source
https://github.com/andikahilmy/CVE-2015-2912-orientdb-vulnerable
Associated Vulnerability
Title:Orient OrientDB Server Community Edition Studio组件跨站请求伪造漏洞 (CVE-2015-2912)
Description:Orient OrientDB Server Community Edition是英国Orient公司的OrientDB（开源的NoSQL数据库管理系统）服务器的一个社区版。Studio是其中的一个web管理界面组件。 Orient OrientDB Server Community Edition 2.0.14及之前的版本和2.1.0版本中的Studio组件的JSONP终端中存在安全漏洞，该漏洞源于程序没有正确限制回调值。远程攻击者可通过发送特制的HTTP请求利用该漏洞实施跨站请求伪造攻击，获取敏感的信
File Snapshot

 None
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.