Sploitus

Exploit for Injection in Oracle Agile Plm

CVE-2019-2725

githubexploit · 2019-05-29

Exploit Code

README15 lines
## https://sploitus.com/exploit?id=24A6D0CC-8F53-539E-8FBC-D5222C4BC565
# CVE-2019-2725  
CVE-2019-2725 (CNVD-C-2019-48814; WebLogic wls9-async)  

# Command Execution  
## 10.3.6  
![10.0.3 screenshot](https://raw.githubusercontent.com/lufeirider/CVE-2019-2725/master/10.0.3%E6%95%88%E6%9E%9C%E5%9B%BE.jpg)  

## 12.1.3  
![12.1.3 screenshot](https://raw.githubusercontent.com/lufeirider/CVE-2019-2725/master/12.1.3%E6%95%88%E6%9E%9C%E5%9B%BE.jpg)  

# ResultBaseExec.java  
Used to test defineClass; it will restore the malicious class from base64 format and execute the code. It’s mainly for convenience (optional). # JDK7u21.java  
The XML file generated in weblogic-2019-2725_12.1.3 command execution.txt should be compiled using jdk6. # CVE-2019-2725.py  
This tool checks whether the command will be executed.