EDB-32564
functionalXWork < 2.0.11.2 - 'ParameterInterceptor' Class OGNL Security Bypass
view exploit source exploit_dbverifiedtype remoteauthor Meder Kydyralievpublished 2008-11-04catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2008-6504US | medium5.0 | Exploit | ||
ParametersInterceptor in OpenSymphony XWork 2.0.x before 2.0.6 and 2.1.x before 2.1.2, as used in Apache Struts and other products, does not properly restrict # (pound sign) refere… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan