Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2010-1871 PoC — Red Hat JBoss Seam参数化EL表达式远程代码执行漏洞

Source
https://github.com/chaitin/xray-plugins/blob/main/poc/manual/jboss-cve-2010-1871.yml
Associated Vulnerability
Title:Red Hat JBoss Seam参数化EL表达式远程代码执行漏洞 (CVE-2010-1871)
Description:JBoss Seam是一个Java EE5框架，把JSF与EJB3.0组件合并在一起，从而为开发基于Web的企业应用程序提供一个最新的模式。 JBoss Seam处理某些参数化JBoss EL表达式的方式存在输入过滤漏洞。如果远程攻击者能够诱骗通过认证的JBoss Seam用户访问特制的网页，就可能导致执行任意代码。
File Snapshot

 name: poc-yaml-jboss-cve-2010-1871
manual: true
transport: http
set:
    r1: randomInt(8000000, 1000

...
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.