CVE-2017-12615 PoC — Apache Tomcat 安全漏洞

Source

https://github.com/zi0Black/POC-CVE-2017-12615-or-CVE-2017-12717

Associated Vulnerability

Title: Apache Tomcat 安全漏洞 (CVE-2017-12615)
Description:When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.

Description

CVE-2017-12617 and CVE-2017-12615 for tomcat server

Readme

# POC_CVE-2017-12615
CVE-2017-12615 for tomcat server

Original POC: https://www.exploit-db.com/exploits/42953/

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →