Cappricio-Securities/CVE-2018-8033
PoCApache OFBiz 16.11.04 is susceptible to XML external entity injection (XXE injection)
view exploit source poc_in_githubauthor Cappricio-Securitiespublished 2024-04-24catalog poc_in_github
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-8033US | high7.5 | Exploit | ||
In Apache OFBiz 16.11.01 to 16.11.04, the OFBiz HTTP engine (org.apache.ofbiz.service.engine.HttpEngine.java) handles requests for HTTP services via the /webtools/control/httpServi… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan