CVE-2020-9496

Related Files

Apache OfBiz 17.12.01 Remote Command Execution

Posted Aug 4, 2021

Authored by Alvaro Munoz, Adrian Diaz

Apache OfBiz version 17.12.01 exploit that achieves remote command execution via unsafe deserialization of XMLRPC arguments.

tags | exploit, remote

advisories | CVE-2020-9496

SHA-256 | b652b1e90ec39550f162f0098b3ea7e6dd4663ad5d58f1334648f1f4323febf9

Download | Favorite | View

Apache OFBiz XML-RPC Java Deserialization

Posted Mar 12, 2021

Authored by Alvaro Munoz, wvu | Site metasploit.com

This Metasploit module exploits a Java deserialization vulnerability in Apache OFBiz's unauthenticated XML-RPC endpoint /webtools/control/xmlrpc for versions prior to 17.12.04.

tags | exploit, java

advisories | CVE-2020-9496

SHA-256 | 92c0cbc161c309a9ee69f4716d1ce3b791ab490da8ad91b396463bbefc0310d2

Download | Favorite | View

Apache OFBiz XML-RPC Java Deserialization

Posted Aug 17, 2020

Authored by Alvaro Munoz, wvu | Site metasploit.com

This Metasploit module exploits a Java deserialization vulnerability in Apache OFBiz's unauthenticated XML-RPC endpoint /webtools/control/xmlrpc for versions prior to 17.12.04.

tags | exploit, java

advisories | CVE-2020-9496

SHA-256 | 60488cf10d0bb2c687a49e401984865b951905374c0cf0ff883035fc4a5200b0

Download | Favorite | View