.. / CVE-2010-0219

• RCE
• PoC
• Nuclei
• Web

Exploit for Apache Axis2 Default Login (CVE-2010-0219)

Description:

Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of axis2 for the admin account, which makes it easier for remote attackers to execute arbitrary code by uploading a crafted web service.

Nuclei Template

View the template here CVE-2010-0219.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2010/CVE-2010-0219.yaml

References: