Sploitus

Exploit for CVE-2019-2888

kitploit · 2026-08-25

Exploit Code

MARKDOWN29 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-JAS502N-CVE-2019-2888
# CVE-2019-2888 WebLogic EJBTaglibDescriptor XXE Уязвимость

![](https://assets.kitploit.com/production/public/readmes/27347/f652fcb8eeeb342c1145ab22c938a27c92845b92af3bab4b19a911a26c32ed7d.png)

![](https://raw.githubusercontent.com/jas502n/cve-2019-2888/HEAD/CVE-2019-2888.gif)

https://www.oracle.com/security-alerts/cpuoct2019.html

## fernflower.jar

`weblogic.jar/weblogic/servlet/ejb2jsp/dd/EJBTaglibDescriptor.class`

root@kitploit:~
    
    
    ╭─root@jas502n /var 
    ╰─# find ./ |grep EJBTaglibDescriptor                                                                       ✔  8388  18:32:43 
    .//weblogic.jar/weblogic/servlet/ejb2jsp/dd/EJBTaglibDescriptor.class
    .//weblogic.jar/weblogic/servlet/ejb2jsp/gui/EJBTaglibDescriptorTree.class
    .//weblogic.jar/weblogic/servlet/ejb2jsp/gui/EJBTaglibDescriptorPanel.class
    

root@kitploit:~
    
    
    ╭─root@jas502n /var 
    ╰─# ls                                                                                                      ✔  8392  18:33:22 
    EJBTaglibDescriptor.java fernflower.jar           weblogic.jar