Published: 07/12/2013 Updated: 29/08/2017

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 685

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Certain getText methods in the ActionSupport controller in Apache Roller prior to 5.0.2 allow remote malicious users to execute arbitrary OGNL expressions via the first or second parameter, as demonstrated by the pageTitle parameter in the !getPageTitle sub-URL to roller-ui/login.rol, which uses a subclass of UIAction, aka "OGNL Injection."

Vulnerable Product	Search on Vulmon	Subscribe to Product
apache roller 4.0
apache roller 4.0.1
apache roller
apache roller 5.0

## # This module requires Metasploit: http//metasploitcom/download # Current source: githubcom/rapid7/metasploit-framework ## require 'msf/core' class Metasploit3 < Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient include Msf::Exploit::FileDropper def initialize(info = {}) super(upda ...

Custom Splunk Dashboard for Efficient Security Analysis Executive Summary In this project, we delve into the development and enhancement of an operational intelligence dashboard within a Security Information and Event Management (SIEM) system using Splunk The primary focus is on investigating suspicious activities and integrating new panels into the dashboard for more effic

CWE-94 http://www.exploit-db.com/exploits/29859 http://secunia.com/advisories/55862 http://rollerweblogger.org/project/entry/apache_roller_5_0_2 http://secunia.com/advisories/55877 http://security.coverity.com/advisory/2013/Oct/remote-code-execution-in-apache-roller-via-ognl-injection.html http://www.osvdb.org/100342 https://exchange.xforce.ibmcloud.com/vulnerabilities/89239 https://nvd.nist.gov https://github.com/romanjeanpierre/Custom_SplunkDashboard https://www.exploit-db.com/exploits/29859/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2013-4212

Vulnerability Summary

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect