peterpeter228 / CNVD-C-2019-48814

WebLogic wls9-async反序列化远程命令执行漏洞

CNVD-C-2019-48814

WebLogic wls9-async反序列化远程命令执行漏洞

漏洞复现：

http://10.10.20.166:7001/_async/AsyncResponseService

curl -i http://10.10.20.166:7001/_async/favicon.ico

CVE-2017-10271 No pactch

resever_shell

command see

webshell