{"uuid": "b4d2dfb0-9848-4946-a16e-b0fce33d2e78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-1871", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/jboss_seam_exec.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"guerrino di massa\", \"Cristiano Maruti \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform\\n          4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression\\n          Language (EL) expressions, which allows remote attackers to execute arbitrary code\\n          via a crafted URL. This modules also has been tested successfully against IBM\\n          WebSphere 6.1 running on iSeries.\\n\\n          NOTE: this is only a vulnerability when the Java Security Manager is not properly\\n          configured.\", \"disclosure_date\": \"2010-07-19\", \"fullname\": \"auxiliary/admin/http/jboss_seam_exec\", \"is_install_path\": true, \"mod_time\": \"2025-05-16 01:16:37 +0000\", \"name\": \"JBoss Seam 2 Remote Command Execution\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/admin/http/jboss_seam_exec.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"admin/http/jboss_seam_exec\", \"references\": [\"CVE-2010-1871\", \"OSVDB-66881\"], \"rport\": 8080, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:46:46.616830Z"}