Sploitus

Exploit for Injection in Oracle Agile Plm

CVE-2019-2725

githubexploit · 2019-06-16

Exploit Code

README15 lines
## https://sploitus.com/exploit?id=EEB220AD-2CB0-50FB-A3B9-A87BBC32BA19
# CVE-2019-2725 bypass

## tips
coded in python3,payload[here](https://github.com/jiansiting/CVE-2019-2725 "here")
that payload only work in jdk6
![](https://github.com/kerlingcode/CVE-2019-2725/blob/master/bug.png)
## exp
usage: usage:exp.py 127.0.0.1:8080 whoami
![](https://github.com/kerlingcode/CVE-2019-2725/blob/master/exp.png)
![](https://github.com/kerlingcode/CVE-2019-2725/blob/master/exp2.png)
## poc
after edit the ip.txt,programe will check the ip in ip.txt,testing if the vulnerability exist or not :

![](https://github.com/kerlingcode/CVE-2019-2725/blob/master/poc.png)