EDB-17691

functional

Apache Struts < 2.2.0 - Remote Command Execution (Metasploit)

view exploit source exploit_dbverifiedtype remoteauthor Metasploitpublished 2011-08-19catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2010-1870USmedium5.0Exploit
The OGNL extensive expression evaluation capability in XWork in Struts 2.0.0 through 2.1.8.1, as used in Atlassian Fisheye, Crucible, and possibly other products, uses a permissive…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan