Exploit for Injection in Oracle Agile Plm

githubexploit · 2019-04-28

Description

Exploit for Injection in Oracle Agile_Plm, security testing tool for learning purposes only

Affected software

Oracle Agile Product Lifecycle Management= 9.3.3, 9.3.4, 9.3.5

Oracle Communications Converged Application Server= 5.1, 7.0, 7.1

Oracle Peoplesoft Enterprise Peopletools= 8.56, 8.57, 8.58

Oracle Storagetek Tape Analytics Sw Tool= 2.3

All known vulnerabilities by product

Alt Linux Oracle Weblogic Server Virtualbox

CVSS 9.8 for CVE-2019-2725

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:NONE

Integrity:NONE

Availability:HIGH

Working code

93%confidence this exploit runs

Based on 2 file(s) in the source

EPSS Score

100.0%higher than 100.0% of all CVEs

Updated 2026-06-16

Exploit Details

Modified:2020-08-27 07:53

Last Seen:2025-08-31 23:05

Reporter:iceMatcha

Repository:No longer on GitHub

Tags

oracle agile plminjection exploitsecurity testing toolcommand execution

Other exploits for CVE-2019-2725

CNVD-C-2019-48814

2026-08-27 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

Oracle-WLS-Weblogic-RCE

2026-08-27 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

weblogic_2019_2725_wls_batch

2026-08-27 KitPloitKITPLOIT

Exploit Code

README5 lines

## https://sploitus.com/exploit?id=F0A8B3BF-4286-5816-848E-620FA88A8C8F
# CNTA-2019-0014-CVE-2019-2725  
**Disclaimer: This tool is intended only for security testing purposes; illegal use is prohibited.**  
Usage: python3 weblogic_rce.py [url] [command] [yes/no] [Windows or Linux]  
For detailed analysis, please refer to: https://icematcha.win/?p=1174