Exploit for CVE-2018-8033

kitploit · 2026-08-25

Description

PyPI tool for CVE-2018-8033 by Cappricio-Securities under MIT license.

Entry point

ParameterserviceName · request body

Path/webtools/control/httpService

HTTP service endpoint vulnerable to external DOCTYPE references triggering a payload that may exfiltrate secret information from the host (CVE-2018-8033).

Affected Apache Ofbiz versions

Apache Ofbiz≤ 16.11.04

All known vulnerabilities by product

Apache Ofbiz

CVSS 7.5 for CVE-2018-8033

7.5

HIGH SEVERITY

Version 3.0

VectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:NONE

Availability:NONE

EPSS Score

59.6%higher than 99.1% of all CVEs

Updated 2026-08-30

CVE Information

CVE-2018-8033

References

https://github.com/Cappricio-Securities/CVE-2018-8033/releases/

Exploit Details

Modified:2026-08-25 06:13

Last Seen:2026-08-26 08:06

Reporter:KitPloit

Exploit Code

MARKDOWN12 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-CAPPRICIO-SECURITIES-CVE-2018-8033
![logo](https://assets.kitploit.com/production/public/readmes/15890/f429b99894197b6023fe3ee999debc7c49baecd3039961e26d3bba30c57cb37e.webp)

## Emblemas

![MIT License](https://img.shields.io/badge/License-MIT-green.svg) ![PyPI - Version](https://img.shields.io/pypi/v/CVE-2018-8033) ![PyPI - Downloads](https://img.shields.io/pypi/dm/CVE-2018-8033) ![GitHub all releases](https://img.shields.io/github/downloads/Cappricio-Securities/CVE-2018-8033/total) ![](https://img.shields.io/github/release/Cappricio-Securities/CVE-2018-8033)![Profile_view](https://komarev.com/ghpvc/?username=Cappricio-Securities&label=Profile%20views&color=0e75b6&style=flat) ![Follow Twitter](https://img.shields.io/twitter/follow/cappricio_sec?style=social)

## Licença

MIT

## Instalação

Exploit Code

Share

Share on social media: