Exploit for apache-ofbiz

kitploit · 2026-08-27

Description

Apache OFBiz CVE-2020-9496 vulnerability referenced with video and tools.

Entry point

Parametertest · path

Pathwebtools/control/xmlrpc

Unsafe deserialization of XMLRPC arguments in webtools/xmlrpc endpoint leading to remote code execution

Affected Apache Ofbiz versions

Apache Ofbiz= 17.12.03

All known vulnerabilities by product

CVSS 6.1 for CVE-2020-9496

6.1

MEDIUM SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:REQUIRED

Scope:CHANGED

Confidentiality:LOW

Integrity:LOW

Availability:NONE

Exploit Details

Modified:2026-08-27 02:32

Last Seen:2026-08-27 21:54

Reporter:KitPloit

Tags

Apache OFBizCVE-2020-9496video referencetools

Other exploits for CVE-2020-9496

2026-08-29 KitPloitKITPLOIT

2026-08-29 KitPloitKITPLOIT

2026-08-29 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

2026-08-25 KitPloitKITPLOIT

2026-08-25 KitPloitKITPLOIT

Exploit for Improper Restriction of XML External Entity Reference in Apache Solr

2021-08-16 CreamGITEE

Exploit Code

MARKDOWN6 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-VULNMACHINES-APACHE-OFBIZ-CVE-2020-9496
# apache-ofbiz-CVE-2020-9496

## यूट्यूब

https://www.youtube.com/watch?v=DO93Xc8sGWg