EDB-36426
functionalApache Struts 2.0.9/2.1.8 - Session Tampering Security Bypass
view exploit source exploit_dbverifiedtype remoteauthor Hisato Killingpublished 2011-12-07catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2011-5057US | medium5.0 | Exploit | ||
Apache Struts 2.3.1.2 and earlier, 2.3.19-2.3.23, provides interfaces that do not properly restrict access to collections such as the session and request collections, which might a… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan