mirror of
https://github.com/0xMarcio/cve.git
synced 2025-12-30 04:49:42 +00:00
1.3 KiB
1.3 KiB
CVE-2018-19276
Description
OpenMRS before 2.24.0 is affected by an Insecure Object Deserialization vulnerability that allows an unauthenticated user to execute arbitrary commands on the targeted system via crafted XML data in a request body.
POC
Reference
- http://packetstormsecurity.com/files/151553/OpenMRS-Platform-Insecure-Object-Deserialization.html
- http://packetstormsecurity.com/files/155691/OpenMRS-Java-Deserialization-Remote-Code-Execution.html
- https://know.bishopfox.com/advisories/news/2019/02/openmrs-insecure-object-deserialization
- https://www.exploit-db.com/exploits/46327/
Github
- https://github.com/0xT11/CVE-POC
- https://github.com/20142995/pocsuite
- https://github.com/ARPSyndicate/cvemon
- https://github.com/PalindromeLabs/Java-Deserialization-CVEs
- https://github.com/lnick2023/nicenice
- https://github.com/mpgn/CVE-2018-19276
- https://github.com/qazbnm456/awesome-cve-poc
- https://github.com/xbl3/awesome-cve-poc_qazbnm456