exploit/multi/http/jboss_maindeployer

weaponized

JBoss JMX Console Deployer Upload and Execute

view exploit source metasploittype exploitpublished 2007-02-20catalog metasploit

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2010-0738US	medium5.3OT critical	73.8% (99th)	KEV	2010-04-28
The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access…
CVE-2007-1036US	high7.5	82.3% (100th)	Exploit	2007-02-21
The default configuration of JBoss does not restrict access to the (1) console and (2) web management interfaces, which allows remote attackers to bypass authentication and gain ad…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.