cve/CVE-2012-1826.md at 4024663e83c70ac127726b49919178f8121c5338 - cve - 临风笛

admin/cve

mirror of https://github.com/0xMarcio/cve.git synced 2025-05-28 01:04:30 +00:00

0xMarcio 48a00929ac Removed duplicates

2024-06-18 02:51:15 +02:00

633 B

Raw Blame History

CVE-2012-1826

Description

dotCMS 1.9 before 1.9.5.1 allows remote authenticated users to execute arbitrary Java code via a crafted (1) XSLT or (2) Velocity template.

POC

Reference

Github

No PoCs found on GitHub currently.