Skip to content

(CVE-2022-26134)an unauthenticated and remote OGNL injection vulnerability resulting in code execution in the context of the Confluence server

Notifications You must be signed in to change notification settings

Brucetg/CVE-2022-26134

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

5 Commits
 
 
 
 
 
 

Repository files navigation

CVE-2022-26134

(CVE-2022-26134)an unauthenticated and remote OGNL injection vulnerability resulting in code execution in the context of the Confluence server

Require:Python2 or Python3

Usage:

python cve_2022_26134.py -url target_url -cmd "ls -al"
python cve_2022_26134.py -url target_url -cmd "whoami"

if target is windows system, please use the script as follows, for example:

python3 cve_2022_26134.py -url target_url -cmd "cmd /c tasklist"

About

(CVE-2022-26134)an unauthenticated and remote OGNL injection vulnerability resulting in code execution in the context of the Confluence server

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages