{"uuid": "5a0b1dd6-ec0a-4fbd-8d74-73829a8f5b27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-1871", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/jboss_seam_upload_exec.rb", "content": "{\"aliases\": [], \"arch\": \"java\", \"author\": [\"vulp1n3 \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"Versions of the JBoss Seam 2 framework < 2.2.1CR2 fails to properly\\n          sanitize inputs to some JBoss Expression Language expressions.  As a\\n          result, attackers can gain remote code execution through the\\n          application server.  This module leverages RCE to upload and execute\\n          a given payload.\\n\\n          Versions of the JBoss application server (AS) admin-console are\\n          known to be vulnerable to this exploit, without requiring authentication.\\n          Tested against JBoss AS 5 and 6, running on Linux with JDKs 6 and 7.\\n\\n          This module provides a more efficient method of exploitation - it\\n          does not loop to find desired Java classes and methods.\", \"disclosure_date\": \"2010-08-05\", \"fullname\": \"exploit/multi/http/jboss_seam_upload_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"JBoss Seam 2 File Upload and Execute\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/http/jboss_seam_upload_exec.rb\", \"platform\": \"Java\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"multi/http/jboss_seam_upload_exec\", \"references\": [\"CVE-2010-1871\", \"URL-https://bugzilla.redhat.com/show_bug.cgi?id=615956\", \"URL-http://blog.o0o.nu/2010/07/cve-2010-1871-jboss-seam-framework.html\", \"URL-http://archives.neohapsis.com/archives/bugtraq/2013-05/0117.html\"], \"rport\": 8080, \"session_types\": false, \"targets\": [\"Java Universal\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:51.236199Z"}