exploit/multi/http/struts_code_exec

functional

Apache Struts Remote Command Execution

view exploit source metasploittype exploitpublished 2010-07-13catalog metasploit
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2010-1870USmedium5.0Exploit
The OGNL extensive expression evaluation capability in XWork in Struts 2.0.0 through 2.1.8.1, as used in Atlassian Fisheye, Crucible, and possibly other products, uses a permissive…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan