Exploit for CVE-2019-2725-POC

kitploit · 2026-08-25

Description

CVE-2019-2725 POC: send crafted POST request via Burp Suite to deploy a webshell.

Affected software

Oracle Agile Product Lifecycle Management= 9.3.3, 9.3.4, 9.3.5

Oracle Communications Converged Application Server= 5.1, 7.0, 7.1

Oracle Peoplesoft Enterprise Peopletools= 8.56, 8.57, 8.58

Oracle Storagetek Tape Analytics Sw Tool= 2.3

All known vulnerabilities by product

Alt Linux Oracle Weblogic Server Virtualbox

CVSS 9.8 for CVE-2019-2725

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:NONE

Integrity:NONE

Availability:HIGH

CVE Information

Exploit Details

Modified:2026-08-25 04:29

Last Seen:2026-08-26 03:02

Reporter:KitPloit

Tags

CVE-2019-2725webshell uploadPOST requestBurp Suiteproof of concept

Other exploits for CVE-2019-2725

2026-08-28 KitPloitKITPLOIT

weblogic_2019_2725_wls_batch

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

CNVD-C-2019-48814

2026-08-27 KitPloitKITPLOIT

Exploit Code

MARKDOWN4 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-N0B1E6-CVE-2019-2725-POC
# CVE-2019-2725-POC

CVE-2019-2725-POC Измените адрес бэкдора в txt на свой собственный, используйте Burp Suite для отправки POST-запроса на целевой сервер, содержимое запроса — это содержимое txt.