Sploitus

CVE-2014-0094

9 known exploits for CVE-2014-0094

The ParametersInterceptor in Apache Struts before 2.3.16.2 allows remote attackers to "manipulate" the ClassLoader via the class parameter, which is passed to the getClass method.

Affected products
Apache Struts
Apache Struts
< 2.3.16.1
Fix
Available
CVSS 2.0
5.0 MEDIUM
EPSS
99.6% (100th percentile)
NVD status
Modified
Published
2014-03-10
CVE-2014-0094 at NVD
Authoritative description, scoring and affected products

9 known exploits for CVE-2014-0094

Proof-of-concept code and exploit modules indexed by Sploitus

Apache Struts < 1.3.10 / < 2.3.16.2 - ClassLoader Manipulation Remote Code Execution Exploit
2017-03-23 metasploitZDTRuby
Apache Struts ClassLoader Manipulation Remote Code Execution
2014-07-01 RootSEEBUGRuby
Struts2 远程命令执行
2014-05-04 RootSEEBUGRuby
Apache Struts ClassLoader Manipulation Remote Code Execution Exploit
2014-05-03 metasploitZDTRuby
Apache Struts - ClassLoader Manipulation Remote Code Execution (Metasploit)
2014-05-02 MetasploitEXPLOITDBRuby
Apache Struts ClassLoader Manipulation Remote Code Execution
2014-05-02 Mark ThomasPACKETSTORMRuby
Apache Struts ClassLoader Manipulation Remote Code Execution
2014-04-29 Mark Thomas, Przemyslaw Celej, Redsadic <julian.vilas@gmail.com>, Matthew Hall <hallm@sec-1.com>METASPLOITRuby
Apache Struts ClassLoader操作漏洞
2014-03-10 RootSEEBUG
Apache Struts < 1.3.10 / < 2.3.16.2 - ClassLoader Manipulation Remote Code Execution (Metasploit)
2014-03-06 MetasploitEXPLOITDBRuby