what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

Files from David Shanahan

Apache Continuum 1.4.2 Arbitrary Command Execution

Posted Jun 13, 2016

Authored by wvu, David Shanahan | Site metasploit.com

This Metasploit module exploits a command injection in Apache Continuum versions 1.4.2 and below. By injecting a command into the installation.varValue POST parameter to /continuum/saveInstallation.action, a shell can be spawned.

tags | exploit, shell

SHA-256 | cf845d6fbc3b09514ed47ba1ed811ff6c6d343b0941a626f3ff4522492ad83c7

Download | Favorite | View

Apache Continuum 1.4.2 Command Injection / Cross Site Scripting

Posted Jun 7, 2016

Authored by David Shanahan

Apache Continuum version 1.4.2 suffers from command injection and cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss

SHA-256 | 33753b859896ef529d7220d4783017ba4819ff23e9203b674af3f8b5ff78b5f1

Download | Favorite | View