CVE-2011-3923

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Apache Struts - 'ParametersInterceptor' Remote Code Execution (Metasploit)2013-03-22 · remote · multiple · Verified

Impact

Apache Struts before 2.3.1.2 allows remote attackers to bypass security protections in the ParameterInterceptor class and execute arbitrary commands.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://seclists.org/fulldisclosure/2014/Jul/38
• http://www.exploit-db.com/exploits/24874
• http://www.securityfocus.com/bid/51628
• http://www.securitytracker.com/id?1026575
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3923
• https://exchange.xforce.ibmcloud.com/vulnerabilities/72585
• https://security-tracker.debian.org/tracker/CVE-2011-3923
• http://seclists.org/fulldisclosure/2014/Jul/38
• http://www.exploit-db.com/exploits/24874
• http://www.securityfocus.com/bid/51628
• http://www.securitytracker.com/id?1026575
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3923
• https://exchange.xforce.ibmcloud.com/vulnerabilities/72585
• https://security-tracker.debian.org/tracker/CVE-2011-3923